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Abstract. The purpose of these lecture notes is to provide readers, 
who have some mathematical background but little or no exposure to 
quantum mechanics and quantum computation, with enough material 
to begin reading the research literature in quantum computation and 
quantum information theory. This paper is a written version of the 
first of eight one hour lectures given in the American Mathematical Soci- 
ety (AMS) Short Course on Quantum Computation held in conjunction 
with the Annual Meeting of the AMS in Washington, DC, USA in Jan- 
uary 2000, and will be published in the AMS PSAPM volume entitled 
"Quantum Computation.". 

Part 1 of the paper is a preamble introducing the reader to the con- 
cept of the qubit. 

Part 2 gives an introduction to quantum mechanics covering such top- 
ics as Dirac notation, quantum measurement, Heisenberg uncertainty, 
Schrodinger's equation, density operators, partial trace, multipartite 
quantum systems, the Heisenberg versus the Schrodinger picture, quan- 
tum entanglement, EPR paradox, quantum entropy. 

Part 3 gives a brief introduction to quantum computation, cover- 
ing such topics as elementary quantum computing devices, wiring di- 
agrams, the no-cloning theorem, quantum teleportation, Shor's algo- 
rithm, Grover's algorithm. 

Many examples are given to illustrate underlying principles. A ta- 
ble of contents as well as an index are provided for readers who wish 
to "pick and choose." Since this paper is intended for a diverse audi- 
ence, it is written in an informal style at varying levels of difficulty and 
sophistication, from the very elementary to the more advanced. 
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Part 1. Preamble 



1. Introduction 



These lecture notes were written for the American Mathematical Society 
(AMS) Short Course on Quantum Computation held 17-18 January 2000 
in conjunction with the Annual Meeting of the AMS in Washington, DC in 
January 2000. The notes are intended for readers with some mathematical 
background but with little or no exposure to quantum mechanics. The 
purpose of these notes is to provide such readers with enough material in 
quantum mechanics and quantum computation to begin reading the vast 
literature on quantum computation, quantum cryptography, and quantum 
information theory. 

The paper was written in an informal style. Whenever possible, each 
new topic was begun with the introduction of the underlying motivating 
intuitions, and then followed by an explanation of the accompanying math- 
ematical finery. Hopefully, once having grasped the basic intuitions, the 
reader will find that the remaining material easily follows. 

Since this paper is intended for a diverse audience, it was written at 
varying levels of difficulty and sophistication, from the very elementary to 
the more advanced. A large number of examples have been included. An 
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index and table of contents are provided for those readers who prefer to 
"pick and choose." Hopefully, this paper will provide something of interest 
for everyone. 

Because of space limitations, these notes are, of necessity, far from a 
complete overview of quantum mechanics. For example, only finite dimen- 
sional Hilbert spaces are considered, thereby avoiding the many pathologies 
that always arise when dealing with infinite dimensional objects. Many 
important experiments that are traditionally part of the standard fare in 
quantum mechanics texts (such as for example, the Stcrn-Gerlach experi- 
ment. Young's two slit experiment, the Aspect experiment) have not been 
mentioned in this paper. We leave it to the reader to decide if these notes 
have achieved their objective. 

The final version of this paper together with all the other lecture notes 
of the AMS Short Course on Quantum Computation will be published as a 
book in the AMS PSAPM Series entitled "Quantum Computation." 



2. The classical world 

2.1. Introducing the Shannon bit. 

Since one of the objectives of this paper is to discuss quantum information, 
we begin with a brief discussion of classical information. 

The Shannon bit is so well known in our age of information that it needs 
little, if any, introduction. As we all know, the Shannon bit is like a very 
decisive individual. It is either or 1, but by no means both at the same 
time. The Shannon bit has become so much a part of our every day lives 
that we take many of its properties for granted. For example, we take for 
granted that Shannon bits can be copied. 

2.2. Polarized light: Part I. The classical perspective. 



Throughout this paper the quantum polarization states of light will be 
used to provide concrete illustrations of underlying quantum mechanical 
principles. So we also begin with a brief discussion of polarized light from 
the classical perspective. 

Light waves in the vacuum are transverse electromagnetic (EM) waves 
with both electric and magnetic field vectors perpendicular to the direction 
of propagation and also to each other. (See figure 1.) 



6 



SAMUEL J. LOMONACO, JR. 




Figure 1. A linearly polarized electromagnetic wave. 
If the electric field vector is always parallel to a fixed line, then the EM 
wave is said to be linearly polarized. If the electric field vector rotates 
about the direction of propagation forming a right-(left-)handed screw, it is 
said to be right (left) elliptically polarized. If the rotating electric field 
vector inscribes a circle, the EM wave is said to be right-or left-circularly 
polarized. 

3. The quantum world 

3.1. Introducing the qubit — But what is a qubit? 

Many of us may not be as familiar with the quantum bit of information, 
called a qubit. Unlike its sibling rival, the Shannon bit, the qubit can be 
both and 1 at the same time. Moreover, unlike the Shannon bit, the 
qubit can not be duplicated^. As we shall see, qubits are like very slippery, 
irascible individuals, exceedingly difficult to deal with. 

One example of a qubit is a spin ^ particle which can be in a spin-up state 
|1) which we label as "1", in a spin-down state |0) which we label as "0", or 
in a superposition of these states, which we interpret as being both and 
1 at the same time. (The term "superposition" will be explained shortly.) 

Another example of a qubit is the polarization state of a photon. A 
photon can be in a vertically polarized state ||). We assign a label of "1" 
to this state. It can be in a horizontally polarized state We assign a 

label of "0" to this state. Or, it can be in a superposition of these states. 
In this case, we interpret its state as representing both and 1 at the same 
time. 

Anyone who has worn polarized sunglasses is familiar with the polariza- 
tion states of light. Polarized sunglasses eliminate glare by letting through 
only vertically polarized light, while filtering out the horizontally polarized 



^This is a result of the no-cloning theorem of Wootters and Zurek[g^. A proof of the 
no-cloning theorem is given in Section 10.8 of this paper. 
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light. For that reason, they are often used to ehminate road glare, i.e., 
horizontally polarized light reflected from the road. 

3.2. Where do qubits live? — But what is a qubit? 

But where do qubits live? They live in a Hilbert space 7i. By a Hilbert 
space, we mean: 

A Hilbert space TC is a vector space over the complex numbers C with 
a complex valued inner product 

(-,-) -.nxH^c 

which is complete with respect to the norm 

\\u\\ = \l {u,u) 

induced by the inner product. 

Remark 1. By a complex valued inner product, we mean a map 

(-,-) -.nxH^c 

from TC X TC into the complex numbers C such that: 

1) (u, u) = if and only if u = 

2) {u,v) = iv,u)* 

3) {u, V + w) = {u, v) + {u, w) 

4) {u,\v) = \{u,v) 

where '* ' denotes the complex conjugate. 
Remark 2. Please note that {Xu,v) = X*{u,v). 

3.3. A qubit is ... f\ 



A qubit is a quantum system Q whose 
state lies in a two dimensional Hilbert space TC. 



^Barenco et al in Q define a qubit as a quantum system with a two dimensional Hilbert 
space, capable of existing in a superposition of Boolean states, and also capable of being 
entangled with the states of other qubits. Their more functional definition will take on 
more meaning as the reader progresses through this paper. 
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Part 2. An Introduction to Quantum Mechanics 



4. The beginnings of quantum mechanics 

4.1. A Rosetta stone for Dirac notation: Part I. Bras, kets, and 
bra-(c)-kets . 

The elements of a Hilbert space H will be called ket vectors, state 
kets, or simply kets. They will be denoted as: 

I label ) 

where HabeV denotes some label. 

Let H* denote the Hilbert space of all Hilbert space morphisms of H into 
the Hilbert space of all complex numbers C, i.e., 

n* = Homc {n,C). 

The elements of H* will be called bra vectors, state bras, or simply bras. 
They will be denoted as: 

( label I 

where once again HabeV denotes some label. 



Also please note that the complex number 

( labeli I (I label2 )) 

will simply be denoted by 

( labeli I label2 ) 

and will be called the bra-(c)-ket product of the bra {labeli | and the ket 
I label2 ). 



There is a monomorphism (which is an isomorphism if the underlying 
Hilbert space is finite dimensional) 

defined by 

I label ) I — ^ ( I label ) , — ) 
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The bra ( | label ) , — ) is denoted by ( label \. 



Hence, 

( labeli I label2 ) = (| labeli ) , \ label2 )) 



Remark 3. Please note that (A | label)y = A* {label\. 

The tensor product]^ H ® K, oi two Hilbert spaces Ti. and K, is simply 
the "simplest" Hilbert space such that 

1) {hi + /12) ® k = hi ® k + h2 ® k, for all hi, /i2 G W and for all k £ IC, 
and 

2) h® {ki+k2) =h®ki + h(^k2 for aWh^H and for all /ci, /c2 G /C. 

3) \ {h®k) = (Xh) (g,k = h(g) (Xk) for all X e C, h e H, k e IC. 

Remark 4. Hence, \\ \label) \\ = \J { label \ label ) anc? ( labeli \ labeh ) = 
(I labeli ) , I label2 )) ■ 



It follows that, if { ei, 62, . . . , } and { /i, /2, • • • , /«, } are respectively 
bases of the Hilbert spaces 7i and /C, then { Cj 8 | 1 < i < m, 1 < j < n } 
is a basis of W /C. Hence, the dimension of the Hilbert space 7i®lC\s the 
product of the dimensions of the Hilbert spaces Ti and /C, i.e.. 

Dim {n®lC) = Dim {H) ■ Dim (fC) . 



Finally, if | labeli ) and | labeh ) are kets respectively in Hilbert spaces Hi 
and 7^2) then their tensor product will be written in any one of the following 
three ways: 

I labeli ) ® I label2 ) 
I labeli ) I label2 ) 
I labeli , label2 ) 



^Readers well versed in homological algebra will recognize this informal definition as a 
slightly disguised version of the more rigorous universal definition of the tensor product. 
For more details, please refer to or any other standard reference on homological 

algebra. 
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4.2. Quantum mechanics: Part I. The state of a quantum system. 



The states of a quantum system Q are represented by state kets in a 
Hilbert space H. Two kets |a) and \/3) represent the same state of a quantum 
system Q if they differ by a non-zero multiphcative constant. In other words, 
I a) and represent the same quantum state Q if there exists a non-zero 
A G C such that 

\a)=X\P) 

Hence, quantum states are simply elements of the manifold 

n/~ = CP"-^ 

where n denotes the dimension of H, and CP"~^ denotes complex projec- 
tive (n — l)-space . 

Convention: Since a quantum mechanical state is represented by a state 
ket up to a multiplicative constant, wc will, unless stated otherwise, 
choose those kets \a) which are of unit length, i.e., such that 

{a \ a) = 1 <^=> II |a)|| = 1 



4.2.1. Polarized light: Part II. The quantum mechanical perspective. 

As an illustration of the above concepts, we consider the polarization 
states of a photon. 

The polarization states of a photon are represented as state kets in a two 
dimensional Hilbert space H. One orthonormal basis of H consists of the 

kets 

|0) and |0) 

which represent respectively the quantum mechanical states of left- and 
right-circularly polarized photons. Another orthonormal basis consists of 
the kets 

II) and 1^) 

representing respectively vertically and horizontally linearly polarized pho- 
tons. And yet another orthonormal basis consists of the kets 

I/) and |\) 

for linearly polarized photons at the angles = tt/A and 9 = — 7r/4 off the 
vertical, respectively. 
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These orthonormal bases are related as follows: 

\/) = 7)5 (II) + 1-)) r I/) 



i\) = ^(11) -I-)) 

f II) = ^(i/) + i\)) 

I-) = ^(i/)-i\)) 

10) = 

10) = 



II) = 




^^\0) + ^ 10) 

¥ 10) + ^ 10) 
;^(|0) + |0)) 

;^(|0)-|0)) 



¥ I/) + ¥ l\) 



i^^|/) + ¥l\) 



The bracket products of the various polarization kets are given in the 
table below: 





I) 


-) 


/) 


\) 


0) 


0) 


CI 


1 





1 


i 


i 

V2 


1 


(-1 





1 






t 

V2 


V2 


(/I 


1 


1 


1 





1-i 
2 


1+i 
2 


(\l 









1 


1+i 
2 


1-i 
2 


(01 


1 


t 

V2 


1+i 

2 


1-i 

2 


1 





(01 


V2 


I 

V2 


1-i 
2 


1+i 
2 





1 



In terms of the basis {||) , |-«-*-)} and the dual basis {(|| , (■*-*■!}, these kets 
and bras can be written as matrices as indicated below: 



(II 



(/I 

(\l 
(01 

(01 



(1 0), 

(0 1), 



II) 



^) = 



I/) 
l\) 

10) 



1 

V2 



1 

V2 



1 

V2 



10) = ^A] 



V2 



In this basis, for example, the tensor product \/'0) is 
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I/O) 



and the projection operator |0) (0| is: 



1 

i 

V2 



10) (01 



1 

72 V 



4.3. A Rosetta stone for Dirac notation: Part II. Operators. 

An (linear) operator or transformation O on a ket space 7^ is a 
Hilbert space morphism of 7i into 7i, i.e., is an element of 

Home in,n) 

The adjoint of an operator O is that operator such that 

^O^ I labeh ) , I label2 )) = (| labeh ) , O | labeh )) 
for all kets | labeh ) and | label2 )■ 

In like manner, an (linear) operator or transformation on a bra space H* 
is an element of 

Home in*,n*) 

Moreover, each operator O on H can be identified with an operator, also 
denoted by O, on H* defined by 

( labeh \ ' — ^ ( labeh \ O 

where ( labeh \ O is the bra defined by 

(( labeh I O) (I labeh)) = { labeh \ {O \ labeh)) 

(This is sometimes called Dirac's associativity law.) Hence, the expression 

( labeh \ O \ labeh) 

is unambiguous. 

Remark 5. Please note that 

{0\label))^ = {label\0^ 
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4.4. Quantum mechanics: Part II. Observables. 

In quantum mechanics, an observable is simply a Hermitian (also 
called self-adjoint) operator on a Hilbert space H-, i.e., an operator O such 
that 

An eigenvalue a of an operator ^4 is a complex number for which there is 
a ket \label) such that 

A \ label) = a \ label) . 

The ket \label) is called an eigenket of A corresponding to the eigenvalue 
a. 

An important theorem about observables is given below: 

Theorem 1. The eigenvalues Ui of an observable A are all real numbers. 
Moreover, the eigenkets for distinct eigenvalues of an observable are orthog- 
onal. 

Definition 1. An eigenvalue is degenerate if there are at least two linearly 
independent eigenkets for that eigenvalue. Otherwise, it is non- degenerate 

Notational Convention: If all the eigenvalues Oj of an observable A 
are nondegeneratc, then we can and do label the eigenkets of A with 
the corresponding eigenvalues Oj. Thus, we can write: 

A \ai) = Qi \ai) 

for each eigenvalue Oj. 

Convention: In this paper, unless stated otherwise, we assume that the 
eigenvalues of observables are non-degenerate. 

One notable exception to the above convention is the measurement 
operator 

\ai) {ai\ 

for the eigenvalue Oj, which is the outer product of ket \ai) with its adjoint 

the bra (aj|, where we have assumed that |aj) (and hence, (aj|) is of unit 
length. It has two eigenvalues and 1. 1 is a nondegeneratc eigenvalue with 
eigenket \ai). is a degenerate eigenvalue with corresponding eigenkets 

{ ■ 

An observable A is said to be complete if its eigenkets \ai) form a basis 
of the Hilbert space H. Since by convention all the eigenkets are chosen to 
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be of unit length, it follows that the eigenkets of a complete nondegenerate 
observable A form an orthonormal basis of the underlying Hilbert space. 

Moreover, given a complete nondegenerate observable A, every ket {ip) in 
H can be written as: 

i 

Thus, for a complete nondegenerate observable A, we have the following 
operator equation which expresses the completeness of A, 

XI = 1 

i 

In this notation, we also have 

A = ^ttj \ai) {ai\ , 

i 

where once again we have assumed that \ai) and {ai\ are of unit length for 
all i. 



Example 1. The Pauli spin matrices 




are examples of observables that frequently appear in quantum mechanics 
and quantum computation. Their eigenvalues and eigenkets are given in 
the following table: 



Pauli Matrices 


Eigenvalue/Eigenket 


o) 




+1 


io>+|i> _ 1 M \ 

V2 a/2 V 1 / 






-1 


|o)-|i) _ I ( 1 \ 

V2 V2\ -I ) 








+1 


|0>+i|l> _ 1 ( ^\ 






-1 


|0>-i|l> _ 1 / 1 \ 




''' = (0 -1) 




+ 1 








-1 
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4.5. Quantum mechanics: Part III. Quantum measurement — Gen- 
eral principles. 

In this section, A will denote a complete nondegenerate observable with 
eigenvalues Oi and eigenkets \ai). We will, on occasion, refer to {|ai)} as 
the frame (or the basis) of the observable A. 

According to quantum measurement theory, the measurement of an 
observable ^ of a quantum system Q in the state {ip) produces the eigen- 
value as the measured result with probability 

Pro& (Value Oj is observed) = ||(aj | "0)11^ i 

and forces the state of the quantum system Q into the state of the corre- 
sponding eigenket |aj). 

Since quantum measurement is such a hotly debated topic among physi- 
cists, we (in self-defense) quote P. A.M. Dirac[p^]: 

"A measurement always causes the (quantum mechanical) system 
to jump into an eigenstate of the dynamical variable that is being 
measured." 



Thus, the result of the above mentioned measurement of observable A of 
a quantum system Q which is in the state before the measurement can 
be diagrammatically represented as follows: 



First 




Second 




1 ; \ V- 1 \ / 1 ; \ Meas. of A i \ . 
m = l^i (oi 1 W ^ aj \aj) ? 




Meas. of A 




« \aj) 






Proh= \\{aj 1 V)f 




Prob = 1 





Please note that the measured value is the eigenvalue aj with probability 
II ( I '0 ) 11^ • If the same measurement is repeated on the quantum system 
Q after the first measurement, then the result of the second measurement is 
no longer stochastic. It produces the previous measured value aj and the 
state of Q remains the same, i.e., \aj) . 



The observable 

\ai) {ai\ 

is frequently called a selective measurement operator (or a filtration) 

for Oj. As mentioned earlier, it has two eigenvalues and 1. 1 is a nonde- 
generate eigenvalue with eigenket \aj), and is a degenerate eigenvalue with 
eigenkets {\aj)}.^^. 
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Thus, 



Meas. of a^) (oj 






1 • \ai) = \ai) , 


Prob=\\{a, 1 





but for j ^ i, 



Meas. of |aj) (aj 
Prob = II {uj I '0) I 



• \aj) = 



The above description of quantum measurement is not the most general 
possible. For the more advanced quantum measurement theory of proba- 
bilistic operator valued measures (POVMs) (a.k.a., positive opera- 



tor valued measures), please refer to such books as for example |43| and 
PI- 



4.6. Polarized light: Part III. Three examples of quantum mea- 
surement. 



We can now apply the above general principles of quantum measurement 
to polarized light. Three examples are given below:^ 

Example 2. 



Rt. Circularly 
polarized photon 

\o) = j=^{\^)+^\--)) 



Vertical 
Polaroid 
filter 




Prob 



Measurement op. 

It) CI 



Prob = \ 



Vertically 
polarized 
photon 
II) 





No photon 



Example 3. A vertically polarized filter followed by a horizontally polarized 
filter. 



*The last two examples can easily be verified experimentally with at most three pair 
of polarized sunglasses. 
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photon 

Normalized so that 

\\af + \\pf = l 



Vert, 
polar. 

filter 




Prob 



a 



Vert, 
polar, 
photon 



II) (11 



Horiz. 
polar. 

filter 



Prob = 1 



No 
photon 





Example 4. But if we insert a diagonally polarized filter (by 45° off the 
vertical) between the two polarized filters in the above example, we have: 




a 



i:) = ;^(i/^) + i\)) p 



1 yQv 1 

i/) = ^(i:) + i-)) 



I/) (/I 



where the input to the first filter is a ||) + /3 | ■<->). 



4.7. A Rosetta stone for Dirac notation: Part III. Expected values. 



The average value (expected value) of a measurement of an observable 
on a state la) is: 



For, since 



we have 



{A) = {a\A\a) 
(oil = 1 , 



But on the other hand, 



(ail A \aj) = Qj (oj I aj) = OiSij 
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Thus, 

{A) = ^ (a I Oj) ai {ai | a) = ^ a, || (a, | a) f 

i i 

Hence, we have the standard expected value formula, 

{A) = y ^ ajProh (Observing on input |a)) . 



4.8. Quantum Mechanics: Part IV. The Heisenberg uncertainty 
principle. 

There is, surprisingly enough, a limitation of what we can observe in the 
quantum world. 

Prom classical probability theory, we know that one yardstick of uncer- 
tainty is the standard deviation, which measures the average fluctuation 
about the mean. Thus, the uncertainty involved in the measurement of a 
quantum observable A is defined as the standard deviation of the observed 
eigenvalues. This standard deviation is given by the expression 



Uncertainty {A) = 




where 

AA = A- {A) 



Two observables A and B are said to be compatible if they commute, 
i.e., if 

AB = BA. 

Otherwise, they are said to be incompatible. 

Let [A, B], called the commutator of A and B, denote the expression 

[A, B]=AB- BA 

In this notation, two operators A and B are compatible if and only if [A, B] = 
0. 



The following principle is one expression of how quantum mechanics places 
limits on what can be observed: 
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Heisenberg's Uncertainty Principle^ 



{iAAf){iABf)>-\{[A,B])\' 



Thus, if A and B are incompatible, i.e., do not commute, then, by mea- 
suring A more precisely, we are forced to measure B less precisely, and vice 
versa. We can not simultaneously measure both A and B to unlimited 
precision. Measurement of A somehow has an impact on the measurement 
of B, and vice versa. 

4.9. Quantum mechanics: Part V. Dynamics of closed quantum 
systems: Unitary transformations, the Hamiltonian, and Schrodinger's 
equation. 

An operator [/ on a Hilbert space TC is unitary if 



Unitary operators are of central importance in quantum mechanics for many 
reasons. We list below only two: 

• Closed quantum mechanical systems transform only via unitary trans- 
formations 

• Unitary transformations preserve quantum probabilities 

Let IV'(i)) denote the state as a function of time i of a closed quantum 
mechanical system Q . Then the dynamical behavior of the state of Q is 
determined by the Schrodinger equation 



where H denotes Planck's constant divided by 2ir, and where H denotes an 
observable of Q called the Hamiltonian. The Hamiltonian is the quantum 
mechanical analog of the Hamiltonian of classical mechanics. Li classical 
physics, the Hamiltonian is the total energy of the system. 

4.10. The mathematical perspective. 

From the mathematical perspective, Schrodinger's equation is written as: 



= U 



1 




lmu{t) 



where 



\m) 



u\m) , 



^We have assumed units have been chosen such that fi = 1. 
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and where —j^H{t) is a skew-Hermitian operator lying in the Lie algebra of 
the unitary group. The solution is given by a multiplicative integral, called 
the path-ordered integral, 

U{t) = % ^e-i^^'\ 

which is taken over the path —j^H{t) in the Lie algebra of the unitary group. 
The path-ordered integral is given by: 

S ^e-^^W'^* = Jim JJe-i^^'^^)^ 

k=n 

= lim fe-^^^"-^) • e-*^"'^-^)-^) e-^^^i'^) • e-H^(°-^) 

n-^oo L 



Remark 6. The standard notation for the above path-ordered integral is 

Pexp ^-^jH{t)dt^ 

If the Hamiltonian H{t) = H is independent of time, then all matrices 
commute and the above path-ordered integral simplifies to 

$ ^e-f.^'i' = e^o-TiHdt ^^-j,Ht 

Thus, in this case, U (t) is nothing more than a one parameter subgroup of 
the unitary group. 



5. The Density Operator 
5.1. Introducing the density operator. 

John von Neumann suggested yet another way of representing the state 
of a quantum system. 

Let \ip) be a unit length ket (i.e., { ip \ ip ) = 1) in the Hilbert space TC 
representing the state of a quantum systemQ The density operator p 
associated with the state ket \ip) is defined as the outer product of the ket 

''Please recall that each of the kets in the set { A \ip) | A G C, A 7^ } represent the same 
state of a quantum system. Hence, we can always (and usually do) represent the state of 
a quantum system as a unit normal ket, i.e., as a ket such that { tp \ ip } = 1 . 
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(which can be thought of as a column vector) with the bra (which 
can be thought of as a row vector), i.e., 

The density operator formahsm has a number of advantages over the ket 
state formalism. One advantage is that the density operator can also be 
used to represent hybrid quantum/classical states, i.e., states which are a 
classical statistical mixture of quantum states. Such hybrid states may also 
be thought of as quantum states for which we have incomplete information. 

For example, consider a quantum system which is in the states (each of 
unit length) 

IV'l) , IV'2) , ■ ■ ■ , IV'n) 

with probabilities 

Pl,P2, ■■■ ,Pn 

respectively, where 

Pi + P2 + • • • + Pn = 1 

(Please note that the states , {^2) , ■ ■ ■ , iV'n) need not be orthogonal.) 
Then the density operator representation of this state is defined as 

P = Pl IV'l) (V'll +P2 IV'2) (^^21 + ...+Pn IV'n) {lpn\ 

If a density operator p can be written in the form 

it is said to represent a pure ensemble . Otherwise, it is said to represent 
a mixed ensemble . 

5.2. Properties of density operators. 

It can be shown that all density operators are positive semi-definite Her- 
mitian operators of trace 1, and vice versa. As a result, we have the following 
crisp mathematical definition: 

Definition 2. An linear operator on a Hilbert space TC is a density oper- 
ator if it is a positive semi-definite Hermitian operator of trace 1. 

It can be shown that a density operator represents a pure ensemble if 
and only if = p, or equivalently, if and only if Trace{p^) = 1. For all 
ensembles, both pure and mixed, Trace{p^) < 1. 

From standard theorems in linear algebra, we know that, for every density 
operator p, there exists a unitary matrix U which diagonalizes p, i.e., such 
that UpU^ is a diagonal matrix. The diagonal entries in this matrix are. 
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of course, the eigenvalues of p. These are non-negative real numbers which 
all sum to 1. 

Finally, if we let V denote the set of all density operators for a Hilbert 
space H, then iD is a convex subset of the Lie algebra of the unitary group 
associated with H. 



5.3. Quantum measurement in terms of density operators. 

Let {ai} denote the set of distinct eigenvalues of an observable A. 
Let P(i- denote the projection operator that projects the underlying Hilbert 
space onto the eigenspace determined by the eigenvalue Oj. For example, if 
ai is a non-degenerate eigenvalue, then 

Pa, = Wi) {ai\ 

Finally, let Q be a quantum system with state given by the density operator 
P- 

If the quantum system Q is measured with respect to the observable A, 
then with probability 

Pi = Trace (PaiP) 

the resulting measured eigenvalue is Oj, and the resulting state of Q is given 
by the density operator 

_ Pgj pPgj 

~ Trace {Pa^p) ' 

Moreover, for an observable A, the averaged observed eigenvalue expressed 
in terms of the density operator is: 

(A) = trace{pA) 

Thus, we have extended the definition of (A) so that it applies to mixed 
as well as pure ensembles, i.e., generalized the following formula to mixed 
ensembles: 

(A) = {ij; \ A \ tp) = trace dV') (V'l ^) = trace{pA) . 
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For example, consider the following mixed ensemble of the polarization 
state of a photon: 

Example 5. 



Ket 


II) 


1/) 


Proh. 


3 
4 


1 
4 



In terms of the basis W) of the two dimensional Hilbert space H, the 
density operator p of the above mixed ensemble can be written as: 

p = IIIXIl + JI/X/l 













2 







7 1 

8 8 

1 1 



Example 6. The following two preparations produce mixed ensembles with 
the same density operator: 



Ket 


II) 


I-) 


Prob. 


1 

2 


1 
2 



and 



Ket 


\/) 


l\) 


Prob. 


1 

2 


1 
2 



For, for the left preparation, we have 



p = ^ii)ai + ii-)(-i 



1/10 

2 I 1 



And for the right preparation, we have 



24 



SAMUEL J. LOMONACO, JR. 




There is no way of physically distinguishing the above two mixed ensembles 
which were prepared in two entirely different ways. For the density operator 
represents all that can be known about the state of the quantum system. 

5.5. The partial trace of a linear operator. 

In order to deal with a quantum system composed of many quantum 
subsystems, we need to define the partial trace. 

Let 

o-.n — >ne Home {n, n) 

be a linear operator on the Hilbert space 7i. 

Since Hilbert spaces are free algebraic objects, it follows from standard 
results in abstract algebra^ that 

Home {n, n) = n^n* , 

where we recall that 

n* = Home {n, C) . 



Hence, such an operator O can be written in the form 

a 

where the kets \ha) lie in Tl and the bras {ka\ lie in Ti"^ . 



Thus, the standard trace of a linear operator 

Trace : Home ('^j'^) — * C 

^See for example p5| . 
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is nothing more than a contraction, i.e., 

Trace{0) = '^aa{ ka \ ha) , 

a 

i.e., a replacement of each outer product \ha) <8) {ka\ by the corresponding 



bracket { ka\ ha )■ 

We can generaUze the Trace as follows: 

Let H now be the tensor product of Hilbert spaces Hi, 7^2, • ■ ■ ,'Hn, i-e., 



n = Qgnj . 

Then it follows once again from standard results in abstract algebra that 

n 

Homc{H,H) = 0{Hj^Hj) . 

i=i 

Hence, the operator O can be written in the form 

n 

O = J2(^a(^\ha,j) ® {ka,j\ , 
a j=l 

where, for each j, the kets \ha,j) lie in Hj and the bras {ka,j\ lie in Hj for 
all a. 



Next we note that for every subset I of the set of indices J = {1,2, . . . , n}, 
we can define the partial trace over I, written 



Tracei : Home I Qs)^i,Qs)Wj — > Home ^j, Hj 

as the contraction on the indices I, i.e., 

Tracei (C) = XI 11 ^ I ^""'^ '* ' ^"'J' ^ ^ 



For example, let 7ii and TIq be two dimensional Hilbert spaces with se- 
lected orthonormal bases {|0i) , |li)} and {|Oo) , |lo)}) respectively. Thus, 
{|0i0o) , |Oilo) , |liOo) , |lilo)} is an orthonormal basis ofH = Hi'S>Ho ■ 
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Let p G Home CH, Ti) be the operator 

|OiOo)-|lilo)\ ^ /(OiOo|-(lilo| 



1 

P=2 



y/2 J \ y/2 

= ^ (lOiOo) (OiOol - lOlOo) (lilol - llilo) (OlOol + |lilo) (lilol) 

which in terms of the basis {|OiOo) , |Oilo) , |liOo) , |lilo)} can be written as 
the matrix 

/ 1 -1 \ 


\ -1 1 / 

where the rows and columns are hsted in the order |OiOo), |Oilo), |liOo), 
llilo) 



The partial trace Trace^ with respect to X = {0} of p is 
pi = Traceo {p) 

= ^Traceo (|OiOo) (OiOqI - |OiOo) (lilol - |lilo) (OiOqI + |lilo) (lilol) 

= \ ((Oq |Oo) |0i) (Oil - (lo I Oo) |0i) (111 - (Oo I lo) 111) (Oil + (Iq | Iq) |1i) (1i| 

= ^(|0i)(0i|-|0i)(li|) 
which in terms of the basis {|0i) , |li)} becomes 

Pi = Traceoip) = ^ ( o 1 ) ' 
where the rows and columns are listed in the order |0i), |li) . 
5.6. Multipartite quantum systems. 

One advantage density operators have over kcts is that they provide us 
with a means for dealing with multipartite quantum systems. 

Definition 3. Let Qi, Q2, ■■■ , Qn be quantum systems with underlying 

Hilbert spaces TCi, 0,2, ■ ■ ■ , 'Hn, respectively. The global quantum system Q 
consisting of the quantum systems Qi, Q2, ■ ■ ■ , Qn is called a multipartite 
quantum, system. Each of the quantum systems Qj (j = 1,2, ... ,n) is 
called a constituent "part" of Q . The underlying Hilbert space H of Q 
is the tensor product of the Hilbert spaces of the constituent "parts," i.e., 

n 

n = ^n, . 

j=i 
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If the density operator p is the state of a multipartite quantum system 
Q, then the state of each constituent "part" Qj is the density operator pj 
given by the partial trace 

Pj = Tracej_{jy {p) , 
where ^ = {1,2, ... , n} is the set of indices. 



Obviously, much more can be said about the states of multipartite sys- 
tems and their constituent parts. However, we will forego that discussion 
until after we have had an opportunity introduce the concepts of quantum 
entanglement and von Neumann entropy. 

5.7. Quantum dynamics in density operator formalism. 



Under a unitary transformation U, a density operator p transforms ac- 
cording to the rubric: 

p 1 — > UpU^ 

Moreover, in terms of the density operator, Schrodinger's equation^ be- 
comes: 

ih^ = [H,p] , 

where [H,p] denotes the commutator of H and p, i.e., 

[H,p]=Hp-pH 

5.8. The mathematical perspective. 



From the mathematical perspective, one works with ip instead of p be- 
cause ip lies in the Lie algebra of the unitary group. Thus, the density oper- 
ator transforms under a unitary transformation U according to the rubric: 

ip I — > Adu{ip) , 
where Adu denotes the big adjoint representation. 



From the mathematical perspective, Schrodinger's equation is in this case 
more informatively written as: 

d{ip) 1 , ... 
-dT = -r'^^^^'P^ ' 



* Schrodinger's equation determines the dynamics of closed quantum systems. However, 
non-closed quantum systems are also of importance in quantum computation and quantum 
information theory. See for example the Schumacher's work on superoperators, e.g., |^^. 
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where ad_±jj denotes the little adjoint representation . Thus, the solu- 
tion to the above form of Schrodinger's equation is given by the path ordered 
integral: 



Consider a computing device with inputs and outputs for which wc have 
no knowledge of the internal workings of the device. We are allowed to 
probe the device with inputs and observe the corresponding outputs. But 
we are given no information as to how the device performs its calculation. 
We call such a device a blackbox computing device. 

For such blackboxes, we say that two theoretical models for blackboxes 
are equivalent provided both predict the same input/output behavior. We 
may prefer one model over the other for various reasons, such as simplicity, 
aesthetics, or whatever meets our fancy. But the basic fact is that each of 
the two equivalent models is just as "correct" as the other. 

In like manner, two theoretical models of the quantum world are said to 
be equivalent if they both predict the same results in regard to quantum 
measurements. 

Up to this point, we have been describing the Schrodinger model of quan- 
tum mechanics. However, shortly after Schrodinger proposed his model 
for the quantum world, called the Schrodinger picture, Heisenberg pro- 
posed yet another, called the Heisenberg picture. Both models were 
later proven to be equivalent. 

In the Heisenberg picture, state kets remain stationary with time, but 

observables move with time. While state kets, and hence density operators, 
remain fixed with respect to time, the observables A change dynamically as: 



under a unitary transformation U = U{t), where the unitary transformation 
is determined by the equation 




where po denotes the density operator at time t = 0. 



6. The Heisenberg model of quantum mechanics 



A 



U^AU 
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It follows that the equation of motion of observables is according to the 
following equation 



One advantage the Hciscnbcrg picture has over the Schrodinger picture is 
that the equations appearing in it are similar to those found in classical 
mechanics. 
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In summary, we have the following table which contrasts the two pictures: 





Schrodinger Picture 


Heisenberg Picture 


otate Ket 


Moving 
l^o)^|V') = C/|V'o) 


stationary 
IV'o) 


Density 
Operator 


Moving 

po 1 — > p = UpoW = Adu (po) 


Stationary 
PQ 


Observable 


Stationary 

^0 


Moving 

Aq^A = U'fAoU = Adu^ {Aq) 


Observable 
Eigenvalues 


Stationary 


Stationary 
«i 






Moving 


Observable 
Frame 


Stationary 


^o = Ejajl«j)o(«:?lo 

= Ej%|aj)t(ajlt 

where \aj) ^ = U'' \o j)^^ 


Dynamical 
Equations 




^n^=[A,H(^^ 


Measurement 


Measurement of observable Aq 
produces eigenvalue aj with 
probability 


Measurement of observable A 
produces eigenvalue aj with 
probability 




i((%io) iV')i'=i((%io) 


|((%lt)IV'o)|' = |((a,lo) 1^)1' 



where 
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It follows that the Schrodinger Hamiltonian H^^^ and the Heisenberg Hamil- 
tonian are related as follows: 

dt ~ dt ' 

where terms containing ^ and have cancelled out as a result of the 
Schrodinger equation. 

We should also mention that the Schrodinger and Heisenberg pictures can 
be transformed into one another via the mappings: 



S — >H 


H — > S 






p{S) ^ p(H) ^ u^piS)^ 


p{H) ^ p{S) ^-^p[H)jj] 








AiH)^A^s) = UA^^)U^ 



Obviously, much more could be said on this topic. 



For quantum computation from the perspective of the Heisenberg model, 
please refer to the work of Deutsch and Hayden|22], and also to Gottesman's 
"study of the ancient Hittites" :-) |31|. 



7. Quantum entanglement 



7.1. The juxtaposition of two quantum systems. 

Let Qi and Q2 be two quantum systems that have been separately pre- 
pared respectively in states |V'i) and |'02), and that then have been united 
without interacting. Because Qi and Q2 have been separately prepared 
without interacting, their states and \ip2) respectively lie in distinct 
Hilbert spaces 7ii and 7i2- Moreover, because of the way in which Qi and 
Q2 have been prepared, all physical predictions relating to one of these quan- 
tum systems do not depend in any way whatsoever on the other quantum 
system. 

The global quantum system Q consisting of the two quantum systems Qi 
and Q2 as prepared above is called a juxtaposition of the quantum systems 
Qi and Q2- The state of the global quantum system Q is the tensor product 
of the states jV'i) and |V'2)- In other words, the state of Q is: 
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7.2. An example: An n-qubit register Q consisting of the juxtapo- 
sition of n qubits. 

Let be a two dimensional Hilbert space, and let {|0) , |1)} denote an ar- 
bitrarily selected orthonormal basis|. Let Hn-i, 'H„_2i • • • >Wo be distinct 
Hilbert spaces, each isomorphic to with the obvious induced orthonormal 
bases 

{ |0„_i) , } , { |0„_2) , |ln-2> },•••,{ |Oo) , |l0> } 

respectively. 

Consider n qubits Qn-i, Qn-i-, ■ ■ ■ , Qo separately prepared in the states 

(|0„_i) + , (|0„„2> + |ln-2)) > • • • ' ^ (|00> + |lo)) , 

respectively. Let Q denote the global system consisting of the separately 
prepared (without interacting) qubits Qn-i, Qn-2, ■ ■ ■ , Qo- Then the state 
of Q is: 

It/;) = (|0,_i) + ® (|0„_2) + |l„-2» ® • • • ® ^ (|Oo) + |lo)) 



1 

71 



|0„_iO„_2...0iOo) + |0„_iO„_2...0ilo)+ ... +|L„_il„_2...1ilo)) 



which lies in the Hilbert space 

Notational Convention: We will usually omit subscripts whenever they 
can easily be inferred from context. 



Thus, the global system Q consisting of the n qubits Qn-i, Qn-2 
Qo is in the state 

n-l 

(|00 . . . 00) + |00 . . . 01) + ... + |11 . . . 11)) G 





, . . . , 



1 

72 



The reader should note that the n-qubit register Q is a superposition of 
kets with labels consisting of all the binary n-tuples. If each binary n-tuple 
bn~ibn-2 ■ ■ - bo is identified with the integer 

6„_i2"-i + 6„_22"-2 + . . . + 502° , 



^We obviously have chosen to label the basis elements in a suggestive way. 
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i.e., if we interpret each binary n-tuple as the radix 2 representation of an 
integer, then we can rewrite the state as 



1 

71 



(|0) + |1) + |2)+ ... +|2"-1)) 



In other words, this n-qubit register contains ah the integers from to 2" — 1 
in superposition. But most importantly, it contains all the integers to 
2" — 1 simultaneously] 

This is an example of the massive parallelism that is possible within quan- 
tum computation. However, there is a downside. If we observe (measure) 
the register, then all the massive parallelism disappears. On measure- 
ment, the quantum world selects for us one and only one of the 2" inte- 
gers. The probability of observing any particular one of the integers is 

2 

(l/\/2) = (5)"". The selection of which integer is observed is unfortu- 
nately not made by us, but by the quantum world. 

Thus, harnessing the massive parallelism of quantum mechanics is no easy 
task! As we will see, a more subtle approach is required. 



7.3. An example of the dynamic behavior of a 2-qubit register. 



We now consider the previous n-qubit register for n = 2. In terms of the 
bases described in the previous section, we have: 



|0) = |00) 



|1) = |01) = 



|2) 



1 10) 



|3) = 111) = 



/1\ 





1 




1 

voy 

/o\ 




viy 
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Let US assume that the initial state |V')t=o of 2-qubit register is 



lt=Q 



MHl>)^lo)^_L(,oo)-|io))^-L(|o)-i2))^^ 





-1 
V 0/ 



Let us also assume that from time t = to time t = 1 the dynamical 
behavior of the above 2-qubit register is determined by a constant Hamil- 
tonian iJ, which when written in terms of the basis {|00) , |01) , |10) , |11)} = 
{|0),|l),|2),|3)}isgivenby 



H 



irh 



f \ 



1-1 

\ -1 1 J 



where the rows and the columns are listed in the order |00), |01), |10), |11), 
i.e., in the order |0), |1), |2), |3). 



Then, as a consequence of Schrodinger's equation, the Hamiltonian H 
determines a unitary transformation 



UcNOT 



Hdt ^ J^-{Hdt ^ 



e n 



H 



/ 1 \ 

10 

1 

\ 1 / 



|0) (0| + |1)(1| + |2) (3| + |3) (2| 



which moves the 2-qubit register from the initial state |V')t=o 
to |V')t=i = UcNOT |V')t=o time t = 1. Then 



at time t = 



UcNOT 



't=o 



( 1 








0\ 






1 \ 





1 








1 
















1 


■71 




-1 







1 


^ ) 




I 


0/ 



1 

7i 



/ 1 \ 



V-i/ 



i=(|00)-|ll)) = i=(|0)-|3)) 



The resulting state (called an EPR pair of qubits for reasons we shall 
later explain) can no longer be written as a tensor product of two states. 
Consequently, we no longer have the juxtaposition of two qubits. 
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Somehow, the resulting two qubits have in some sense "lost their separate 
identities." Measurement of any one of the qubits immediately impacts the 
other. 

For example, if we measure the 0-th qubit (i.e., the right-most qubit), the 
EPR state in some sense "jumps" to one of two possible states. Each of the 
two possibilities occurs with prol)al)ility i. as indicated in the table below: 



^(|OiOo)-|lilo)) 


/// 


Meas. 
0-th 
Qubit 


\\\ 


Prob = \ 
lOiOo) 


Prob = \ 
llilo) 



Thus we see that a measurement of one of the qubits causes a change in the 
other. 



7.4. Definition of quantum entanglement. 

The above mentioned phenomenon is so unusual and so non-classical that 
it warrants a name. 

Definition 4. Let Qi, Q2, ... , Qn be quantum systems with underlying 
Hilbert spaces Hi, H2, ■■■ , Hn, respectively. Then the global quantum 
system Q consisting of the quantum systems Qi, Q2, ... , Qn is said to be 
entangled if its state EH = (S)j=i '"'^^ written in the form 

n 

IV') =(8) IV',) : 

i=i 

where each ket {i/jj) lies in the Hilbert space Hj for, j = 1,2,... ,n. We 
also say that such a state {ip) is entangled. 

Thus, the state 

IV')*=i = ^(|oo)-|ii)) 

of the 2-qubit register of the previous section is entangled. 
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Remark 7. In terms of density operator formalism, a pure ensemble p is 
entangled if it can not be written in the form, 

n 

P = ®Pj ' 

where the pj 's denote density operators. 

Please note that we have defined entanglement only for pure ensembles. 
For mixed ensembles, entanglement is not well understood]^. As a result, 
the "right" definition of entanglement of mixed ensembles is still unresolved. 
We give one definition below: 

Definition 5. A density operator p on a Hilbert space TC is said to be en- 
tangled with respect to the Hilbert space decomposition 

n 

n = (g)H, 

i=i 

if it can not be written in the form 

I ( n 

k=\ \i=i 

for some positive integer i, where the Xk 's are positive real numbers such 
that 

i 

fc=i 

and where each P[j^k) o, density operator on the Hilbert space TCj, 

Readers interested in pursuing this topic further should refer to the works 



of Bennett , the Horodecki's, Nielsen, Smolin, Wootters , and others[y], p5|| , 



7.5. Einstein, Podolsky, Rosen's (EPR's) grand challenge to quan- 
tum mechanics. 

Albert Einstein was skeptical of quantum mechanics, so skeptical that he 



together with Podolsky and Rosen wrote a joint paper[26| appearing in 1935 
challenging the very foundations of quantum mechanics. Their paper hit 
the scientific community like a bombshell. For it delivered a direct frontal 
attack at the very heart and center of quantum mechanics. 



''Quantum entanglement is not even well understood for pure ensembles. 
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At the core of their objection was quantum entanglement. Einstein 
and his colleagues had insightfully recognized the central importance of this 
quantum phenomenon. 

Their argument centered around the fact that quantum mechanics vio- 
lated either the principle of non-localityP^ or the principle of reality^ . 
They argued that, as a result, quantum mechanics must be incomplete, and 
that quantum entanglement could be explained by missing hidden vari- 
ables. 

For many years, no one was able to conceive of an experiment that could 
determine which of the two theories, i.e., quantum mechanics or EPR's 
hidden variable theory, was correct. In fact, many believed that the two 
theories were not distinguishable on physical grounds. 

It was not until Bell developed his famous inequalities ||3|,[^, [|l3|, that a 
physical criterion was found to distinquish the two theories. Bell developed 
inequalities which, if violated, would clearly prove that quantum mechanics 
is correct, and hidden variable theories are not. Many experiments were 
performed. Each emphatically supported quantum mechanics, and clearly 
demonstrated the incorrectness of hidden variable theory. Quantum me- 
chanics was the victor! 

7.6. Why did Einstein, Podolsky, Rosen (EPR) object? 

But why did Einstein and his colleagues object so vehemently to quantum 
entanglement? 

As a preamble to our answer to this question, we note that Einstein and 
his colleagues were convinced of the validity of the following two physical 
orinciples: 

1) The principle of local interactions , i.e., that all the known forces 
of nature are local interactions, 

2) The principle of non-locality, i.e., that spacelike separated regions 
of spacetime are physically independent of one another. 

Their conviction in regard to principle 1) was based on the fact that all 
four known forces of nature, i.e., gravitational, electromagnetic, weak, and 
strong forces, are local interactions. By this we mean: 

i) They are mediated by another entity, e.g., graviton, photon, etc. 

ii) They propagate no faster than the speed c of light 

iii) Their strength drops off with distance 

^^We will later explain the principle of non-locality. 

^^For an explanation of the principle of reality as well as the principle of non-localty, 
please refer, for example, to |7|], p^ . 
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Their conviction in regard to principle 2) was based on the following 
reasoning: 

Two points in spacetime Pi = {xi,yi, zi,ti) and P2 = ix2,y2, Z2,t2) 
are separated by a spacelike distance provided the distance between 
{xi,yi,zi) and {x2,y2,Z2) is greater than c\t2 — ti\, i.e., 

Distance {{xi,yi,zi) , (a;2, 2/2, 2=2)) > c\t2 - ti| , 

where c denotes the speed of light. In other words, no signal can travel 
between points that are said to be separated by a spacelike distance unless 
the signal travels faster than the speed of light. But because of the basic 
principles of relativity, such superluminal communication is not possible. 

Hence we have: 

The principle of non-locality: Spacelike separated regions of space- 
time are physically independent. In other words, spacelike separated 
regions can not influence one another. 

7.6.1. EPR's objection. 

We now are ready to explain why Einstein and his colleagues objected 
so vehemently to quantum entanglement. We explain Bohm's simplified 
version of their argument. 

Consider a two qubit quantum system that has been prepared by Alice 
PI in her laboratory in the state 

|V') = ^(|OiOo)-|lilo)) . 

After the preparation, she decides to keep qubit #1 in her laboratory, but 
enlists Captain James T. Kirk of the Starship Enterprise to transport qubit 
7^0 to her friend Bob |^ who is at some far removed distant part of the 
universe, such as at a Federation outpost orbiting about the double star 
Alpha Centauri in the constellation Centaurus. 

After Captain Kirk has delivered qubit #0, Alice's two qubits are now 
separated by a spacelike distance. Qubit #1 is located in her Earth based 
laboratory. Qubits ^0 is located with Bob at a Federation outpost orbiting 
Alpha Centauri. But the two qubits are still entangled, even in spite of the 
fact that they are separated by a spacelike distance. 

If Alice now measures qubit 7^1 (which is located in her Earth based 
laboratory) , then the principles of quantum mechanics force her to conclude 
that instantly, without any time lapse, both qubits are "effected." As a 

^■^ Alice is a well known personality in quantum computation, quantum cryptography, 
and quantum information theory. 

^''Bob is another well known personality in quantum computation, quantum cryptog- 
raphy, and quantum information theory. 
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result of the measurement, both qubits wih be either in the state |OiOo) or 
the state |lilo), each possibihty occurring with probabihty 1/2. 

This is a non-local "interaction." For, 

• The "interaction" occurred without the presence of any force. It was 
not mediated by anything. 

• The measurement produced an instantaneous change, which was cer- 
tainly faster than the speed of light. 

• The strength of the "effect" of the measurement did not drop off with 
distance. 

No wonder Einstein was highly skeptical of quantum entanglement. Yet 
puzzlingly enough, since no information is exchanged by the process, the 
principles of general relativity are not violated. As a result, such an "effect" 
can not be used for superluminal communication. 

For a more in-depth discussion of the EPR paradox and the foundations 
of quantum mechanics, the reader should refer to 

7.7. Quantum entanglement: The Lie group perspective. 

Many aspects of quantum entanglement can naturally be captured in 
terms of Lie groups and their Lie algebras. 

Let 

n = Hn-l nn-2 ... Wo = n-i®o^i 

be a decomposition of a Hilbert space TC into the tensor product of the 
Hilbert spaces Tin-i, 'Hn-2, ••• ,'Ho. Let U = U(H), U„_i = U(Hn-i), 
Un-2 = ^{T~(-n-2), ■■■ iUq = \J{TCo), denote respectively the Lie groups of 
all unitary transformations on TC, Hn-i-, 'Hn-2, ■■■ i'Hq. Moreover, let 

U = u{n), U„_i = Un-l{7in-l), U„_2 = Un-2{'Hn~2), ■■■ , Uq = Uo(Wo) 

denote the corresponding Lie algebras. 

Definition 6. The local subgroup L = l^(7i) o/U = V{7i) is defined as 
the subgroup 

L = U„_i U„„2 ® . . . ® Uo = „_i(g)pU,- . 

The elements of L are called local unitary transformations . Unitary 
transformations which are in U hut not in L are called global unitary 
transformations. The corresponding lie algebra 

i = U„_i ffl U„_2 ffl . . . ffl Uo 
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is called the local Lie algebra, where ffl ' denotes the Kronecker surr^. 



Local unitary transformations can not entangle quantum systems with 
respect to the above tensor product decomposition. However, global unitary 
transformations are those unitary transformations which can and often do 
produce interactions which entangle quantum systems. This leads to the 
following definition: 

Definition 7. Two states {ipi) and {^2) inTC are said to be locally equiv- 
alent ( or, of the same entanglement type) , written 

local 

if there exists a local unitary transformation ?7 G L such that 

c/|V'i> = IV'2> . 

The equivalence classes of local equivalence ~ are called the entangle- 

local 

ment classes of 7i. Two density operators pi and p2, (and hence, the 
corresponding two skew Hermitian operators ipi and ip2 lying inu) are said 
to be locally equivalent ( or, of the same entanglement type), written 

^ local ^ 

if there exists a local unitary transformation ?7 G L such that 

Aduipi) = P2 , 

where Adu denotes the big adjoint representation, i.e., Adu{ip) = U{ip)W . 
The equivalence classes under this relation are called entanglement classes 
of the Lie algebra u(TC). 

Thus, the entanglement classes of the Hilbert space 7i are just the orbits 
of the group action of L,{TC) on TC. In like manner, the entanglement classes 
of the Lie algebra u{7i) are the orbits of the big adjoint action of L,{7i) on 
u(TC). Two states are entangled in the same way if and only if they lie in 
the same entanglement class, i.e., the same orbit. 

For example, let us assume that Alice and Bob collectively possess two 
qubits Qab which are in the entangled state 



, , . \ObOa) + \IbIa) 1 

'^^^ = 7=2 = 7=2 



/1\ 




V 1 / 



^^The Kronecker sum AS B is defined as 

ASB = A(g,l + 1(E) B , 
where 1 denotes the identity transformation. 
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and moreover that Alice possesses qubit labeled A, but not the qubit labeled 
B, and that Bob holds qubit B, but not qubit A. Let us also assume that 
Alice and Bob are also separated by a spacelike distance. As a result, they 
can only apply local unitary transformations to the qubits that they possess. 



Alice could, for example, apply the local unitary transformation 

/ 1 \ 

/ n 1 \ / 1 n \ 

Ua = 



1 
-1 



1 
1 



1 
-1 
\ 0-100/ 

to her qubit to move Alice's and Bob's qubits A and B respectively into the 
state 

/ o\ 

|ObU) - \1bOa) _ 1 
V2 



IV'2) 



V2 



1 

-1 

V 0/ 



Bob also could accomplish the same by applying the local unitary transfor- 
mation 



1 
1 



-1 

1 





-1 





0\ 


1 




















-1 







1 





Ub = 
to his qubit. 

By local unitary transformations, Alice and Bob can move the state of 
their two qubits to any other state within the same entanglement class. 
But with local unitary transformations, there is no way whatsoever that 
Alice and Bob can transform the two qubits into a state lying in a different 
entanglement class (i.e., a different orbit), such as 

IV's) = \ObOa) . 



The only way Alice and Bob could transform the two qubits from state 
l^i) to the state 1^3) is for Alice and Bob to come together, and make the 
two qubits interact with one another via a global unitary transformation 
such as 

/ 1 
1 




-1 





1 

-1 





1 \ 




1 



The main objective of this approach to quantum entanglement is to de- 
termine when two states lie in the same orbit or in different orbits? In other 
words, what is needed is a complete set of invariants, i.e., invariants that 
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completely specify all the orbits ( i.e., all the entanglement classes). We 
save this topic for another lecture [6l|]. 

At first it would seem that state kets are a much better vehicle than 
density operators for the study of quantum entanglement. After all, state 
kets are much simpler mathematical objects. So why should one deal with 
the additional mathematical luggage of density operators? 

Actually, density operators have a number of advantages over state kets. 
The most obvious advantage is that density operators certainly have an up- 
per hand over state kets when dealing with mixed ensembles. But their 
most important advantage is that the orbits of the adjoint action are actu- 
ally manifolds, which have a very rich and pliable mathematical structure. 
Needless to say, this topic is beyond the scope of this paper. 

Remark 8. It should also be mentioned that the mathematical approach 
discussed in this section by no means captures every aspect of the physical 
phenomenon of quantum entanglement. The use of ancilla and of classical 
communication have not been considered. For an in-depth study of the rela- 
tion between quantum entanglement and classical communication (including 
catalysis), please refer to the work of Jonathan, Nielson, and others^T^ . 

In regard to describing the locality of unitary operations, we will later have 
need for a little less precision than that given above in the above definitions. 
So we give the following (unfortunately rather technical) definitions: 

Definition 8. Let TL, Tin-i, 'Hn-2, ■ ■ ■ ,'Ho be as stated above. Let V = 
{-Bq,} be a partition of the set of indices {0,1,2,... ,n — \}, i.e., V is a 
collection of disjoint subsets of {0, 1,2,... ,n — 1}, called blocks, such 
that Ba = {0, 1, 2, . . . , n — 1}. Then the V -tensor product decompo- 
sition ofTC is defined as 

where 

Wb. = (g) , 

for each block B^ in V. Also the subgroup ofV-local unitary transfor- 
mations L,-p{7i) is defined as the subgroup of local unitary transformations 
ofTC corresponding to the V-tensor decomposition ofTi. 

We define the fineness of a partition V, written fineness(V), as the 
maximum number of indices in a block ofV. We say that a unitary transfor- 
mation U ofTCis sufficiently local if there exists a partition V with suf- 
ficiently small fineness{V) (e.g., fineness{V) < 3j such that U £ L-p('H). 
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Remark 9. The above lack of precision is needed because there is no way to 

know what kind (if any) of quantum computing devices will be implemented 
in the future. Perhaps we will at some future date be able to construct 
quantum computing devices that locally manipulate more than 2 or 3 qubits 
at a time? 



8. Entropy and quantum mechanics 
8.1. Classical entropy, i.e., Shannon Entropy. 



Let 5 be a probability distribution on a finite set {si, S2, ■ ■ ■ , s„} of ele- 
ments called symbols given by 

Prob {sj) = pj , 

where Yl^=iPj = 1- Let s denote the random variable (i.e., finite mem- 
oryless stochastic source) that produces the value sj with probability 
Pj- 

Definition 9. The classical entropy (also called the Shannon entropy) 

H(S) of a probability distribution S (or of the source s) is defined as: 

n 

HiS) = His) = -Y,PjHPj) , 
where 1g ' denotes the log to the base 2 . 



Classical entropy H{S) is a measure of the uncertainty inherent in the 
probability distribution S. Or in other words, it is the measure of the 
uncertainty of an observer before the source s "outputs" a symbol Sj. 

One property of such classical stochastic sources we often take for 
granted is that the output symbols Sj are completely distinguishable from 
one another. We will see that this is not necessarily the case in the strange 
world of the quantum. 
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8.2. Quantum entropy, i.e., Von Neumann entropy. 

Let Q be a quantum system with state given by the desity operator p. 
Then there are many preparations 

Preparation 



V'l) 


V'2) 






Pi 


P2 




Pn 



which will produce the same state p. These preparations are classical sto- 
chastic sources with classical entropy given by 

Unfortunately, the classical entropy H oi a preparation does not necessarily 
reflect the uncertainty in the resulting state p. For two different prepa- 
rations Vi and 7^2, having different entropies H (Vi) and H {V2), can (and 
often do) produce the same state p. The problem is that the states of the 
preparation my not be completely physically distinguishable from one an- 
other. This happens when the states of the preparation are not orthogonal. 
(Please refer to the Heisenberg uncertainty principle.) 

John von Neumann found that the true measure of quantum entropy can 
be defined as follows: 



Definition 10. Let Q be a quantum system with state given by the density 
operator p. Then the quantum entropy (also called the von Neumann 
entropy) of Q, written S{Q), is defined as 

S{Q) = -Trace {pig p) , 

where Igp' denotes the log to the base 2 of the operator p. 



Remark 10. The operator \gp exists and is an analytic map p 1 — ^ Igp 

given by the power series 

n=l 

provided that p is sufficiently close to the identity operator I, i.e., provided 

\\P-I\\ < 1 , 

where 

\\A\\ = sup -V-T^ • 
ven \\v\\ 

It can be shown that this is the case for all positive definite Hermitian oper- 
ators of trace 1 . 

For Hermitian operators p of trace 1 which are not positive definite, but 
only positive semi-definite (i.e., which have a zero eigenvalue), the logarithm 
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lg{p) does not exist. However, there exists a sequence pi, p2, Ps, ■ ■ ■ of pos- 
itive definite Hermitian operators of trace 1 which converges to p, i.e., such 
that 

p= lira pk 

k — >oo 

It can then be shown that the limit 

lim pklgPk 

k — ►oo 

exists. 

Hence, S{p) is defined and exists for all density operators p. 

Quantum entropy is a measure of the uncertainty at the quantum level. 
As we shall see, it is very different from the classical entropy that arises 
when a measurement is made. 

One important feature of quantum entropy S{p) is that it is invariant 
under the adjoint action of unitary transformations, i.e., 

SiAdu{p)) = s(upU^) =S{p) . 

It follows that, for closed quantum systems, it is a dynamical invariant. 

As the state p moves according to Schrodinger's equation, the quantum 
entropy S{p) of p remains constant. It does not change unless measurement 
is made, or, as we shall see, unless we ignore part of the quantum system. 

Because of unitary invariance, the quantum entropy can be most easily 
computed by first diagonalizing p with a unitary transformation U, i.e., 

UpU^ = A{X) , 

where A( A ) denotes the diagonal matrix with diagonal A = (Ai, A2, ... , A„). 

Once p has been diagonalized , we have 
S{p) = -Trace (^A( T) Ig A(T)) 

= -Trace ( A (AilgAi, A2lgA2, ... , A^lgA^) ) 

n 

where the Xj 's are the eigenvalues of p, and where Ig = 0. 

Please note that, because p is positive semi-definite Hermitian of trace 1, 
all the eigenvalues of p are non-negative real numbers such that 

n 
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As an immediate corollary we have that the quantum entropy of a pure 
ensemble must be zero, i.e., 

p pure ensemble =^ S{p) = 

There is no quantum uncertainty in a pure ensemble. However, as expected, 
there is quantum uncertainty in mixed ensembles. 

8.3. How is quantum entropy related to classical entropy? 

But how is classical entropy H related to quantum entropy SI 

Let A be an observable of the quantum system Q. Then a measurement 
of A of Q produces an eigenvalue ai with probability 

Pi = Trace {PaiP) , 

where Pa- denotes the projection operator for the eigenspace of the eigen- 
value Oj. For example, if Oj is a non-degenerate eigenvalue, then P^. = 
\ai) (oil . 

In other words, measurement of A of the quantum system Q in state p 
can be identified with a classical stochastic source with the eigenvalues 
as output symbols occurring with probability pi. We denote this classical 
stochastic source simply by (p. A) . 

The two entropies S{p) and H{p, A) arc by no means the same. One is a 
measure of quantum uncertainty before measurement, the other a measure 
of the classical uncertainty that results from measurement. The quantum 
entropy S{p) is usually a lower bound for the classical entropy, i.e., 

S{p)<H{p,A) . 

If A is a complete observable (hence, non-degenerate), and if A is compatible 
with p, i.e., [p,A] = 0, then S{p) = H{p,A). 

8.4. When a part is greater than the whole — Ignorance = uncer- 
tainty. 

Let Q be a multipartite quantum system with constituent parts Q„_i, 
• • • ,Qi, Qo) and let the density operator p denote the state of Q. Then 
from section 5.6 of this paper we know that the state pj of each constituent 
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"part" Qj is given by the partial trace over all degrees of freedom except 
Qj, i-e., by 

Pj = Trace (p) 

< < n- 1 

By applying the above partial trace, we are focusing only on the quantum 
system Qj, and literally ignoring the remaining constituent "parts" of Q. 
By taking the partial trace, we have done nothing physical to the quantum 
system. We have simply ignored parts of the quantum system. 

What is surprising is that, by intentionally ignoring "part" of the quan- 
tum system, we can in some cases create more quantum uncertainty. This 
happens when the constituent "parts" of Q are quantum entangled. 



For example, let Q denote the bipartite quantum system consisting of two 
qubits Qi and Qo in the entangled state 

lOiOo) -|lilo) 



V2 



The corresponding density operator pQ is 
1 

PQ = o 



(lOiOo) (OiOol - lOiOo) (lilol - |lilo) (OiOol + |lilo) (lilol 

/ 1 -1 \ 





\ -1 1 J 



Since pg is a pure ensemble, there is no quantum uncertainty, i.e., 

S{pq) = 0. 



Let us now focus on qubit ^^0 (i.e., Qo)- The resulting density operator 
Pq for qubit #0 is obtained by tracing over Qi, i.e., 

po = Trace, (pq) = i ( |0) (0| + |1) (1| ) = 1 J J 

Hence, the quantum uncertainty of qubit #0 is 

S{po) = 1 . 



Something most unusual, and non-classical, has happened. Simply by 
ignoring part of the quantum system, we have increased the quantum un- 
certainty. The quantum uncertainty of the constituent "part" Qq is greater 



48 



SAMUEL J. LOMONACO, JR. 



than that of he whole quantum system Q. This is not possible in the clas- 
sical world, i.e., not possible for Shannon entropy. (For more details, see 
T5l.) 



There is much more to quantum mechanics 



There is much more to quantum mechanics. For more in-depth overviews, 
there are many outstanding books. Among such books are [^], |jl6[, j25| ], 
pi, g, P], g, 0, PI, 0, 0, m, ra, ra, pi, and many more. 



Part 3. Part of a Rosetta Stone for Quantum 
Computation 



10. The Beginnings of Quantum Computation - Elementary 
Quantum Computing Devices 



We begin this section with some examples of quantum computing devices. 
By a quantum computing devicep] we mean a unitary transformation U 
that is the composition of finitely many sufficiently local unitary transfor- 
mations, i.e., 

U = Un-lUn-2 . . . UiUo, 

where Un-i, Un~2, ••• ,Ui ,Uo are sufficiently local|^ unitary transforma- 
tions. Each Uj is called a computational step of the device. 

Our first examples will be obtained by embedding classical computing 
devices within the realm of quantum mechanics. We will then look at some 
other quantum computing devices that are not the embeddings of classical 
devices. 



^^Unfortunately, Physicists have "stolen" the akronym QCD. :-) 

^^See Definition 8 in Section 7.7 of this paper for a definition of the term 'sufBciently 



local'. 
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10.1. Embedding classical (memoryless) computation in quantum 
mechanics. 

One objective in this section is to represent]^ classical computing com- 
puting devices as unitary transformations. Since unitary transformations 
are invertible, i.e., reversible, it follows that the only classical computing 
devices that can be represented as such transformations must of necessity 
be reversible devices. Hence, the keen interest in reversible computation. 

For a more in depth study of reversible computation, please refer to the 
work of Bennett and others. 

10.2. Classical reversible computation without memory. 



Input < 



X-n—l 

Xl 
Xq 




Vn-l 
Vn-1 

yi 
yo 



> Output 



Each classical n-input/n-output (binary memoryless) reversible com- 
puting device (CRCD„) can be identified with a bijection 

^:{o,ir-^{o,ir 

on the set {0, 1}"" of all binary n-tuples. Thus, we can in turn identify each 
CRCD„ with an element of the permutation group on the 2" symbols 

{(^1 I ^£{0,1}"}. 

Let 

Bn = B {xo,Xi, . . . ,Xn-l) 

denote the free Boolean ring on the symbols xq,xi, ... ,Xn~i ■ Then 
the binary n-tuples 'a £ {0, 1}" are in one-to-one correspondence with the 



minterms of Br,, i.e., 



where 



a ^ 



-> X 



n-l 

n 

j=0 



Since there is a one-to-one correspondence between the automorphisms of 
Bn and the permutations on the set of minterms, it follows that CRCD„'s 



Double meaning is intended. 
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can also be identified with the automorphism group Aut {Bn) of the free 
Boolean ring Bn- 

Moreover, since the set of binary n-tuples {0, 1}" is in one-to-one cor- 
respondence with the set of integers {0, 1,2, ... ,2" — 1} via the radix 2 
representation of integers, i.e., 

n-l 

{bn-l,bn-2, ■■■ ,bi,bo) < — y^bj2^ , 

j=0 

we can, and frequently do, identify binary n-tuples with integers. 

For example, consider the Controlled-NOT gate, called CNOT , which 
is defined by the following wiring diagram: 



CNOT 



where '•' and '©' denote respectively a control bit and a target bit, and 
where 'a -|- 6' denotes the exclusive 'or' of bits a and b. This corresponds to 
the permutation tt = (26) (37), i.e.. 




0) 
1) 
2) 
3) 

4) 
5) 

6) 
7) 



|000) 
1001) 
|010) 
1011) 

1 100) 
1 101) 
1 110) 

1111) 



000) 
001) 
110) 

111) 

100) 
101) 

010) 

oil) 



0) 

1) 

6) 
7) 

4) 
5) 
2) 
3) 



where we have used the following indexing conventions: 

First=Right=Bottom 

Last=Left=Top 

As another example, consider the Toffoli gate , which is defined by the 
following wiring diagram: 





c - 


— 


c + ab 


Toffoli = 


b - 


— > • — 


b 




a 


— • • — 


a 
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where 'a6' denotes the logical 'and' of a and h. As before, '+' denotes 
exclusive 'or'. This gate corresponds to the permutation tt = (67). 

In summary, we have: 

{ CRCDn ] = S^ = Aut (Bn) 



10.3. Embedding classical irreversible computation within classical 
reversible computation. 

A classical 1-input/n-output (binary memoryless) irreversible computing 
device can be thought of as a Boolean function / = /(a:„_2, • ■ • ,xi,xo) in 
Bn-i = B {xq, xi, . . . ,Xn-2)- Such irreversible computing devices can be 
transformed into reversible computing devices via the monomorphism 

L : Bn-l — > Aut{Bn), 
where t(/) is the automorphism in Aut{Bn) defined by 

{Xn-l,Xri-2, - ■ ■ ,Xl,Xo) I > {Xn-1 ©/,.T„_2,-- - ,Xi,Xo), 

and where '©' denotes exclusive 'or'. Thus, the image of each Boolean 
function / is a product of disjoint transpositions in 82^. 

As an additive group (ignoring ring structure), Bn-i is the abelian group 

©j=o ^2, where Z2 denotes the cyclic group of order two. 

Classical Binary Memoryless Computation is summarized in the table 
below: 

Summary 

Classical Binary Memoryless Computation 

Bn-l = ©'LV''"'^2 ^ S2n = Aut{Bn) 



10.4. The unitary representation of reversible computing devices. 

It is now a straight forward task to represent CRCD^'s as unitary trans- 
formations. We simply use the standard unitary representation 

lu: S!{ ' 1J(2":C) I 

of the symmetric group 82^ into the group of 2" x 2" unitary matrices 
U(2'*; C). This is the representation defined by 

TT I > ('5fe,7rfc)2"x2" ' 
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where (5^^ denotes the Kronecker delta, i.e., 

'1 iik = i 

Ski = < 

otherwise 

V. 

We think of such unitary transformations as quantum computing devices. 

For example, consider the controlled-NOT gate CNOT' = (45) (67) G Sg 
given by the wiring diagram 



CNOT' = 



This corresponds to the unitary transformation 




C^CNOT' = i^(CNOT') 



/ 1 
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Moreover, consider the Toffoli gate TofFoIi' = (57) G Sg given by the 
wiring diagram 



Toffoli' = 



This corresponds to the unitary transformation 




^^Toffoii' = i^(Tofroii') 



/ 1 
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Abuse of Notation and a Caveat: Whenever it is clear from context, 
we will use the name of a CRCD„ to also refer to the unitary trans- 
formation corresponding to the CRCD„. For example, we will denote 
v{CNOT) and v{Toffoli) simply by CNOT and Toffoli. Moreover 
we will also use the wiring diagram of a CRCD„ to refer to the unitary 
transformation corresponding to the CRCD„. For quantum computa- 
tion beginners, this can lead to some confusion. Be careful! 



10.5. Some other simple quantum computing devices. 

After CRCD„'s are embedded as quantum computing devices, they are 
no longer classical computing devices. After the embedding, they suddenly 
have acquired much more computing power. Their inputs and outputs can 
be a superposition of many states. They can entangle their outputs. It 
is misleading to think of their input qubits as separate, for they could be 
entangled. 




As an ilhistration of this fact, please note that the quantum computing 
device CNOT" given by the wiring diagram 



CNOT" 



is far from classical. It is more than a permutation. It is a linear operator 
that respects quantum superposition. 

For example, CNOT" can take two non-entangled qubits as input, and 
then produce two entangled qubits as output. This is something no classical 
computing device can do. For example. 



/ 1 








o\ 





1 

















1 


V 





1 





|0) 



ID 



V2 



®|0) = ^(|00)-|10))^^(|00)-|11)) 



For completeness, wc list two other quantum computing devices that are 
embeddings of CRCD„'s, NOT and SWAP: 



NOT 



and 



SWAP 



NOT 



a + 1 



1 

1 




f 1 
















1 








1 
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10.6. Quantum computing devices that are not embeddings. 

We now consider quantum computing devices that are not embeddings of 
CRCDn's. 



The Hadamard gate H is defined as: 



H 



H 



V2U -1 



Another quantum gate is the square root of NOT, i.e., a/NOT, which 
is given by 

1-i ^ i l\ 1 + i 
1 i 



Vnot 



Vnot 



1 -i 
-i 1 



There is also the square root of swap VSWAP which is defined as: 

/ 1 \ 



VSWAP = 



VSWAP 



^ ^ 
2 2 ^ 







\ 1 / 

Three frequently used unary quantum gates are the rotations: 



ciders 



COS u 


I sm 


ism 9 


cos 


cos 6 


' sin 


— sin 6 


' cos 


/ ^i0 





[ 





jea2 



ci6<^3 



10.7. The implicit frame of a wiring diagram. 



Wiring diagrams have the advantage of being a simple means of describing 
some rather complicated unitary transformations. However, they do have 
their drawbacks, and they can, if we are not careful, be even misleading. 

One problem with wiring diagrams is that they are not frame (i.e., basis) 
independent descriptions of unitary transformations. Each wiring diagram 
describes a unitary transformation using an implicitly understood basis. 
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For example, consider CNOT" given by the wiring diagram: 



55 



CNOT" 



b - 


— > • — 


a + 5 


a - 




a 



The above wiring diagram defines CNOT" in terms of the imphcitly un- 
derstood basis 



|0) 



This wiring diagram suggests that qubit ^^1 controls qubit #0, and that 
qubit 7^1 is not effected by qubit ^^O. But this is far from the truth. For, 
CNOT" transforms 

|0) + |1) ^ |0)-|1) 

into 

|0)-|1) |0)-|1) 

where we have used our indexing conventions 

First=Right=Bottom 

Last=Left=Top 

In fact, in the basis 

10') = M, 11') = M 

the wiring diagram of the same unitary transformation CNOT" is: 



b - 


© — 


a + b 


a 


— > • — 


a 



The roles of the target and control qubits appeared to have switched! 
11. The No-Cloning Theorem 



In this section, we prove the no-cloning theorem of Wootters and Zurek 
[ p3[ . The theorem states that there can be no device that produces exact 
replicas or copies of a quantum state. (See also |Q for an elegant proof 
using the creation operators of quantum electrodynamics.) 

The proof is an amazingly simple application of the linearity of quan- 
tum mechanics. The key idea is that copying is an inherently quadratic 
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transformation, while the unitary transformations of quantum mechanics 
are inherently linear. Ergo, copying can not be a unitary transformation. 

But what do we mean by a quantum replicator? 

Definition 11. Let H be a Hilhert space. Then a quantum replicator 
consists of an auxiliary Hilhert space Ha, a fixed state |V'o) £ H-a (called the 
initial state of replicator), and a unitary transformation 

u -.HA^neH — >nA^n®n 

such that, for some fixed state \blank) G H, 

U \ipo) \a) \blank) = \ijja) |a) |a) ; 

for all states \a) gH, where \ipa) £ Ha (called the replicator state after 
replication of\a)) depends on \a). 

Since a quantum state is determined by a ket up to a multiplicative non- 
zero complex number, we can without loss of generality assume that IV'o); 
|o), \blank) are all of unit length. Prom unitarity, it follows that Itpa) is also 
of unit length. 

Let I a), \b) be two kets of unit length in H such that 

0<|(a|6)|<l. 

Then 

U Itpo) \a) \blank) = |^a) |a) |a) 

^ U\^o)\b)\blank) = \^Pb) \b) \b) 

Hence, 

{blank\ {a\ {tpol U^U \b) \hlank) = {blank\ {a\ { ipo \ ipo ) \b) \blank) 

= {a\b) 

On the other hand. 



{blank\ {a\ (V'ol U^U \tpo) \b) \blank) = {a\ {a\ ( I V'b > 1^) \b) 

= ( a I 6 )^ ( Va I V'ft ) 



Thus, 
And so, 



{'^a\i^b) = {a\b) . 



( a I 6 ) ( V'a I "06 ) = 1 
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But this equation can not be satisfied since 

|( a I 6)1 < 1 

and 

|(V'a|V'6)|<|| IV'a) INI \^b) 11 = 1 

Hence, a quantum repficator cannot exist. 

12. Quantum teleportation 



We now give a brief description of quantum teleportation, a means possi- 
bly to be used by future quantum computers to bus qubits from one location 
to another. 

As stated earlier, qubits can not be copied as a result of the no-cloning 
theorem. (Please refer to the previous section.) However, they can be 
teleported, as has been demonstrated in laboratory settings. Such a mech- 
anism could be used to bus qubits from one computer location to another. 
It could be used to create devices called quantum repeaters. 



But what do we mean by teleportation? 

Teleportation is the transferring of an object from one location to an- 
other by a process that: 

1) Firstly dissociates (i.e., destroys) the object to obtain information. - 
The object to be teleported is first scanned to extract sufficient infor- 
mation to reassemble the original object. 

2) Secondly transmits the acquired information from one location to an- 
other. 

3) Lastly reconstructs the object at the new location from the received 
information. - An exact replicas re-assembled at the destination out 
of locally available materials. 

Two key effects of teleportation should be noted: 

1) The original object is destroyed during the process of teleportation. 
Hence, the no-cloning theorem is not violated. 

2) An exact replica of the original object is created at the intended des- 
tination. 
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Scotty of the Starship Enterprise was gracious enough to loan me the 
following teleportation manual. So I am passing it on to you. 

Quantum Teleportation Manual 

Step. 1 .(Location A): Preparation: At location A, construct an EPR 
pair of qubits (qubits #2 and #3) in 7^2 ® "7^3- 



|oi)-|io) 

%/2 

Step 2. Transport: Physically transport entangled qubit #3 from lo- 
cation A to location B. 

Step 3. : The qubit to be teleported, i.e., qubit #1, is delivered to lo- 
cation A in an unknown state 

a|0) + 6|1) 



|00) 



Unitary 
Matrix 



As a result of Steps 1 - 3, wc have: 

• Locations A and B share an EPR pair, i.e. 

— The qubit which is to be teleported, i.e., qubit #1, is at Location 
A 

— Qubit #2 is at Location A 

— Qubit 77^3 is at Location B 

— Qubits #2 & #3 are entangled 

• The current state |$) of all three qubits is: 

■|oi)-|io)' 



|$) = (a|0)+6|l)) 



V2 



To better understand what is about to happen, we re-express the state 
1$) of the three qubits in terms of the following basis (called the Bell basis) 
of 7^1 (8) 7^2 : 



|io)-|oi) 

a/2 
|10) + |01) 

|oo)-|ii) 

|00) + |11) 
V2 
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The result is: 

i[ |M/^)(-a|0)-6|l)) 
^ +\^B){-a\0)+b\l)) 
^ ' +\^c){a\l)+b\0)) 

+ \^D){a\l) -b\0)) ] 

where, as you might have noticed, we have written the expression in a sug- 
gestive way. 

Remark 11. Please note that since the completion of Step 3, we have done 
nothing physical. We have simply performed some algebraic manipulation 
of the expression representing the state |<I>) of the three qubits. 



Let [/ : (g) — > eg) be 



unitary transformation defined by 
. |00) 
. |01) 
. |10) 

. Ill) 



the 



Step 4. (Location A): F^]Apply the local unitary transformation U (E> 
I : Til ® Tis — > Tii 7i2 <8> Tis to the three qubits (actually more 
precisely, to qubits #1 and #2). Thus, under U ® I the state |$) of 
all three qubits becomes 

i[ |00)(-a|0)-6|l)) 
, _ +|01)(-a|0) + 6|l)) 

^ ' +|10)(a|l)+6|0)) 

+ |ll)(a|l)-6|0)) ] 



Step 5. (Location A): Measure qubits 7^1 and ^2 to obtain two bits 
of classical information. The result of this measurement will be one 
of the bit pairs {00, 01, 10, 11} . 

Step 6.: Send from location A to location B (via a classical communica- 
tion channel) the two classical bits obtained in Step 6. 

Actually, there is no need to apply the unitary transformation U . We could have 
instead made a complete Bell state measurement, i.e., a measurement with respect to the 
compatible observables a) a\, |*b) (*s|, \'^c){^c\, \^ d) {'^ d\- We have added 
the additional step 4 to make quantum teleportation easier to understand for quantum 
computation beginners. 

Please note that a complete Bell state measurement has, of this writing, yet to be 
achieved in a laboratoy setting. 
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As an intermediate summary, we have: 

1) Qubit #1 has been disassembled, and 

2) The information obtained during disassembly (two classical bits) has 
been sent to location B. 



Step 7. (Location B): The two bits received from location A are 
used to select from the following table a unitary transformation ?7(*J) 
of Hs, (i.e., a local unitary transformation I4 ® on Hi 7^2 "X" W3) 



Rec. Bits 




Future effect on qubit #3 


00 






-a|0) -6|1) 1 — > a|0) +6|1) 


01 


um = 


r -1 \ 
^ 1 ; 


-a|0) +6|1) 1 — ^ a|0) + 6|1) 


10 


um = 




a|l) + 6|0) 1 — ^ a|0) + 6|1) 


11 


= 


( 1\ 
V -1 j 


a\l) -6|0) 1 — >a|0) +fe|l) 



Step 8. (Location B): The unitary transformation J7(*J) selected in 
Step 7 is applied to qubit #3. 

As a result, qubit #3 is at location B and has the original state of qubit 
7^1 when qubit 7^1 was first delivered to location A, i.e., the state 

a|0) +6|1) 

It is indeed amazing that no one knows the state of the quantum tele- 
ported qubit except possibly the individual that prepared the qubit. Knowl- 
edge of the actual state of the qubit is not required for teleportaton. If its 
state is unknown before the teleportation, it remains unknown after the 
teleportation. All that we know is that the states before and after the 
teleportation are the same. 

13. Shor's algorithm 



The following description of Shor's algorithm is based on |27], |47], |5C], 
H, and . 
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13.1. Preamble to Shor's algorithm. 



There are cryptographic systems (such as RSAp^ that are extensively 
used today (e.g., in the banking industry) which are based on the following 
questionable assumption, i.e., conjecture: 



Conjecture( Assumption). Integer factoring is computationally much 
harder than integer multiplication. In other words, while there are obviously 
many polynomial time algorithms for integer multiplication, there are no 
polynomial time algorithms for integer factoring. I.e., integer factoring 
computationally requires super-polynomial time. 



This assumption is based on the fact that, in spite of the intensive efforts 
over many centuries of the best minds to find a polynomial time factoring 
algorithm, no one has succeeded so far. As of this writing, the most asymp- 
totically efficient classical algorithm is the number theoretic sieve [56|, |57], 



(IgNf^ (IglgiV) 



2/3 



Thus, 



which factors an integer N in time O ^exp 

this is a super-polynomial time algorithm in the number O (Ig N) of digits 
in A^. 



However, ... Peter Shor suddenly changed the rules of the game. 

Hidden in the above conjecture is the unstated, but implicitly understood, 
assumption that all algorithms run on computers based on the principles of 
classical mechanics, i.e., on classical computers. But what if a computer 
could be built that is based not only on classical mechanics, but on quantum 
mechanics as well? I.e., what if we could build a quantum computer? 

Shor, starting from the works of Benioff, Bennett, Deutsch , Feynman, 
Simon, and others, created an algorithm to be run on a quantum com- 
puter, i.e., a quantum algorithm, that factors integers in polynomial time! 

Shor's algorithm takes asymptotically O ^(Ig A^)^ (Iglg A^) (Iglglg A^)^ steps 
on a quantum computer, which is polynomial time in the number of digits 
0{lgN) oiN. 



RSA is a public key cryptographic system invented by Rivest, Shamir, Adleman. 
Hence the name. For more information, please refer to 
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13.2. Number theoretic preliminaries. 

Since the time of Euclid, it has been known that every positive integer N 
can be uniquely (up to order) factored into the product of primes. Moreover, 
it is a computationally easy (polynomial time) task to determine whether or 
not is a prime or composite number. For the primality testing algorithm 



of Miller-Rabin 1 66 1 makes such a determination at the cost of 0(s IgA^) 
arithmetic operations [O (s Ig^ N) bit operations] with probability of error 

ProbError < 2"^ 

However, once an odd positive integer N is known to be composite, it does 
not appear to be an easy (polynomial time) task on a classical computer to 
determine its prime factors. As mentioned earlier, so far the most asymptot- 



ically efficient classical algorithm known is the number theoretic sieve |56] 



which factors an integer N in time O I exp 



Prime Factorization Problem. Given a composite odd positive integer 
N, find its prime factors. 



It is well known [|66| that factoring can be reduced to the task of choosing 
at random an integer m relatively prime to N, and then determining its 
modulo multiplicative order P, i.e., to finding the smallest positive integer 
P such that 

= 1 mod N . 

It was precisely this approach to factoring that enabled Shor to construct 
his factoring algorithm. 



13.3. Overview of Shor's algorithm. 

But what is Shor's quantum factoring algorithm? 



Let N = {0, 1, 2, 3, . . . } denote the set of natural numbers. 



Shor's algorithm provides a solution to the above problem. His algorithm 
consists of the five steps (steps 1 through 5), with only STEP 2 requiring 
the use of a quantum computer. The remaining four other steps of the 
algorithm are to be performed on a classical computer. 

We begin by briefiy describing all five steps. After that, we will then 
focus in on the quantum part of the algorithm, i.e., STEP 2. 
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Step 1. 



Choose a random positive even integer m. Use the polynomial time 
Euclidean algorithm]^ to compute the greatest common divisor gcd (m, A^) 
of m and A'^. If the greatest common divisor gcd (m, N) ^ 1, then we 
have found a non-trivial factor of A^, and we are done. If, on the other 
hand, gcd(m, A^) = 1, then proceed to STEP 2. 



STEP 2. 



Use a QUANTUM COMPUTER to determine the unknown period P of 
the function 

fN 



N 
a 



N 

mod A^ 



Step 3. If P is an odd integer, then goto Step 1. [The probability of P being 
odd is 



■l\k 



^ 2 / , where k is the number of distinct prime factors of A^.] 
P is even, then proceed to Step 4. 



If 



Step 4. Since P is even. 



m 



m 



^ - 1 = OmodA^ . 



If j^i^ Omod A^, then goto Step 1. If m^/^ _^ ^ _^ Omod A^, 
then proceed to Step 5. It can be shown that the probability that 
m^/^ + 1 = Omod A^ is less than (|)'^~^, where k denotes the number 
of distinct prime factors of A^. 



Step 5. Use the Euclidean algorithm to compute d = gcd (m^/^ — 1, A^) . Since 

mod A^, it can easily be shown that d is a non-trivial factor 
of A". Exit with the answer d. 



Thus, the task of factoring an odd positive integer A^ reduces to the 
following problem: 

Problem. Given a periodic function 

/:N-^N, 

find the period P of f. 



■^^The Euclidean algorithm is O (ig^ A'') . For a description of the Euchdean algorithm, 
see for example or ]l9| . 
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13.4. Preparations for the quantum part of Shor's algorithm. 

Choose a power of 2 

Q = 2^ 

such that 

< Q = 2^ < 27V2 , 
and consider / restricted to the set 

5q = {0,1,... ,Q-1} 
which we also denote by /, i.e., 

/ : Sq — > Sq . 

In preparation for a discussion of STEP 2 of Shor's algorithm, we con- 
struct two L-qubit quantum registers, RegisterI and Register2 to hold 
respectively the arguments and the values of the function /, i.e., 

|Reg1) |Reg2) = \a) |/(a)) = \a) \b) = \aoai ■ ■ ■ ai-i) \bobi ■ ■ ■ bi-i) 

In doing so, we have adopted the following convention for representing 
integers in these registers: 

Notation Convention. In a quantum computer, we represent an integer 
a with radix 2 representation 

L-l 

a = XI "^'^^ ' 

j=0 

as a quantum register consisting of the 2" qubits 

\a) = \aoai ■ ■ ■ ul-i) = |oj) 

j=0 

For example, the integer 23 is represented in our quantum computer as n 
qubits in the state: 

|23) = 110111000- --O) 

Before continuing, we remind the reader of the classical definition of the 
Q-point Fourier transform. 
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Definition 12. Let lo be a primitive Q-th root of unity, e.g., uj = ^'^'^1^ , 
Then the Q -point Fourier transform is the map 

Map{SQ,C) ^ Map{SQ,C) 

[f:SQ^C]^[f:SQ^i 

where 



xGSq 

We implement the Fourier transform ^ as a unitary transformation, which 
in the standard basis 

|0),|1),... ,\Q-1) 
is given by the Q x Q unitary matrix 

:f ' 



This unitary transformation can be factored into the product of O (ig^ Q) 
O (ig^ sufficiently local unitary transformations. (See |77], 



13.5. The quantum part of Shor's algorithm. 

The quantum part of Shor's algorithm, i.e., STEP 2, is the following 



STEP 2.0 Initialize registers 1 and 2, i.e., 

IV-o) = |Reg1) |Reg2) = |0) |0) = |00 • • • 0) |0 • • • 0) 



STEP 2.1 1 0Apply the Q-point Fourier transform to RegisterI. 

iV'o) = io) io) m iv^i) = \x) |o) = \x) |o) 

Remark 12. Hence, RegisterI now holds all the integers 

0,1,2,... ,Q-1 

in superposition. 



In this step we could have instead applied the Hadamard transform to RegisterI 
with the same result, but at the computational cost of O (Ig A'^) sufRciently local unitary 
transformations. 



66 



SAMUEL J. LOMONACO, JR. 



STEP 2.2 Let Uf be the unitary transformation that takes |0) to \x) 

Apply the hnear transformation Uf to the two registers. The result 
is: 

Q~l Q-l 

l^i) = To ^ 1"^^ ^ 1^2^ = To ^ '"^^ ^^^^^^ 

^ x=0 ^ x=0 



Remark 13. The state of the two registers is now more than a superposition 
of states. In this step, we have quantum entangled the two registers. 



STEP 2.3. Apply the Q-point Fourier transform to RegI. The resulting state 
is: 

Q-l Q-lQ-1 

x=0 x=0 j/=0 

Q-l 



iT.\\\'^(.yM-\y)wm 

y=o 



where 

Q-l 

|T(y)) = Y,^-y \fix)) . 



x=0 



FEP 2.4. Measure RegI, i.e., perform a measurement with respect to the or- 
thogonal projections 

|0)(0|®7, |2)(2|®/, ... , |Q-1)(Q-1|®/ , 

where I denotes the identity operator on the Hilbert space of the second 
register Reg 2. 

As a result of this measurement, we have, with probability 

Prob{yo) = ^ , 

moved to the state 

|T(2/o)) 



|yo) 



|TM)|| 

and measured the value 

yoe {0,1,2,... ,Q-1} . 
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If after this computation, we ignore the two registers RegI and Reg2, we 
see that what we have created is nothing more than a classical probability 
distribution S on the sample space 



In other words, the sole purpose of executing STEPS 2.1 to 2.4 is to create 
a classical finite mcmoryless stochastic source S which outputs a symbol 
yo G {0, 1, 2, . . . ,Q — 1} with the probability 



(For more details, please refer to section 8.1 of this paper.) 



As we shall see, the objective of the remander of Shor's algorithm is to 
glean information about the period P of f from the just created stochastic 
source S. The stochastic source was created exactly for that reason. 



13.6. Peter Shor's stochastic source S. 



Before continuing to the final part of Shor's algorithm, we need to analyze 
the probability distribution Prob (y) a little more carefully. 



Proposition 1. Let q and r be the unique non-negative integers such that 
Q = Pq + r , where < r < P ; and let Qo = Pq. Then 



{0,1,2,... ,Q-1} . 






r{Qo+P?+{P-r)Ql 



if 



Py = mod Q 
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Proof. We begin by deriving a more usable expression for |T(y)). 

Q-l Qo-l Q-l 

|T(y)) = 5^0;-^ \f{x)) = ^ u^v \f{x)) + ^""^ 



x=0 



x=Qo 



10=0 xi=0 



xo=Q 



P-1 



/Qo 

p 



xo=0 



r-1 



xi=0 



xo=0 



r-1 I \ P-1 

^a;^o2/ . ^^J'j/^i I |/(xo)) + • 
a;o=0 X a;i=0 



xo=r \ si=0 

where we have used the fact that / is periodic of period P. 



l/(^o)) 



Since / is one-to-one when restricted to its period 0, 1,2, . . . ,P — 1, all 
the kets 

1/(0)), 1/(1)), 1/(2)), ... , |/(P-1)), 
are mutually orthogonal. Hence, 







2 




(T(y) 1 T(y)) = r 




+ (P - r) 






xi=0 




xi=Q 



If Py = OmodQ, then since a; is a Q-th root of unity, we have 
(T(y)|T(y))=r(^ + l)' + (P-r) (^^' 



On the other hand, if Py / OmodQ, then we can sum the geometric 
series to obtain 



Qo 
p 



Py -I 



2 




+ iP-r)) 


ujPy-1 



'^.Py.(9R + l] 



e^-^^ - 1 



+ (P-r)) 



eW-^^-1 
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where we have used the fact that w is the primitive Q-th root of unity given 
by 



uj = e 



The remaining part of the proposition is a consequence of the trigono- 
metric identity 

2 



e'" - 1 



4sin^ 



□ 



As a corohary, we have 



Corollary 1. If P is an exact divisor of Q, then 

if Py/OmodQ 

Proh (y) 

j, if Py = mod Q 



13.7. A momentary digression: Continued fractions. 

We digress for a moment to review the theory of continued fractions. (For 
a more in-depth explanation of the theory of continued fractions, please refer 
to PI and p|.) 



Every positive rational number ^ can be written as an expression in the 
form 

C = ao H , 

ai H : 



a2- 



1 

^SH 



where oq is a non-negative integer, and where oi, . . . ,aN are positive inte- 
gers. Such an expression is called a (finite, simple) continued fraction , 
and is uniquely determined by ^ provided we impose the condition oat > 1. 
For typographical simplicity, we denote the above continued fraction by 

[oo, ai, . . . , On] ■ 

The continued fraction expansion of ^ can be computed with the following 
recurrence relation, which always terminates if ^ is rational: 











, and if ^„ 7^ 0, then 
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The n-th convergent (0 < n < N) of the above continued fraction is 
defined as the rational number ^„ given by 

= [«05 Ol, • • • , «n] • 

Each convergent can be written in the for, (,n = where pn and qn 
are relatively prime integers ( gcd {pn,qn) = !)• The integers pn and g„ are 
determined by the recurrence relation 

Po = ao, Pi = aiao + 1, Pn = a-nPn-l + Pn-2-, 
Qo = 1, qi= ai, qn = anq-n-i + qn-2 ■ 



13.8. Preparation for the final part of Shor's algorithm. 

Definition 13. p^or each integer a, let {o}q denote the residue of a 
modulo Q of smallest magnitude. In other words, is the unique 

integer such that 

a = {ajg mod Q 
-Q/2 < {a}r> < Q/2 



Proposition 2. Let y be an integer lying in Sq. Then 



Prob{y) > < 



1. h _ M2 

\ p \^ n) 
Proof. We begin by noting that 



< 



n{Py} 



Q 



<§-f-(i-^)-(^)<f-(i-^)-(^) 



<f •(! 



,i + S)<f-(i-^)-(i + ^)<i. 

where we have made use of the inequalities 



N'^ <Q <2N'^ and < P < iV . 



It immediately follows that 



p 



Q 



< 



vr 



'W}q = a-Q- round (i) = a - Q ■ + i 
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As a result, we can legitimately use the inequality 

< sin^^ < ^2 for l^l < - 
to simplify the expression for Proh (y) . 



Thus, 

Proh (y) 



> 



> 



-7 



Q 



Q 



4 ^(t^) _ 4 1_ f Q-rY 

P \ Q J 



'— 

^ 'q'^ ~ ^ ' p 



The remaining case, {Py}Q = is left to the reader. □ 
Lemma 1. Let 

Y = !^yeSQ\\{Py}Q\<^^ and Sp = {d e Sq \ < d < P} . 
Then the map 

Y — > Sp 

y I — d = d{y) = round (^^ ■ y 

is a bijection with inverse 

y = y{d) = round ( ^ • <^ J ■ 



^P 

Hence, Y and Sp are in one-to-one correspondence. Moreover, 

{Py}Q = P-y-Q-d{y) . 



Remark 14. Moreover, the following two sets of rationals are in one-to-one 
correspondence 

^\y^y}^{^\o<d<p 
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As a result of the measurement performed in STEP 2.4, we have in our 
possession an integer y £Y. We now show how y can be use to determine 
the unknown period P. 

We now need the following theorem^ from the theory of continued frac- 
tions: 



Theorem 2. Let ^ be a real number, and let a and b be integers with b > 0. 
If 



< 



1 

262 



then the rational number a/b is a convergent of the continued fraction ex- 
pansion of ^. 



As a corollary, we have: 



{Py}Q < then the rational number is a convergent 



Corollary 2. // 

of the continued fraction expansion of ^ . 

Proof. Since 

Py - Qd{y) = {Py}c 

we know that 



\Py-Qdiy)\ < 



which can be rewritten as 



y_ _ 

Q P 

But, since Q> N^,it follows that 

diy) 



< 



y_ 
Q 



p 



< 



2Q 



2N^ 



Finally, since P < N (and hence 2^ < gp^-)) the above theorem can be 
applied. Thus, is a convergent of the continued fraction expansion of 
^ = h- □ 



Since is a convergent of the continued fraction expansion of ^, it 
follows that, for some n, 

d{y) ^ Pn 
P Qn ' 



*See H, Theorem 184, Section 10.15]. 
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where p„, and qn are relatively prime positive integers given by a recurrence 
relation found in the previous subsection. So it would seem that we have 
found a way of deducing the period P from the output y of STEP 2.4, and 
so we are done. 

Not quite! 

We can determine P from the measured y produced by STEP 2.4, only if 

Pn = d{y) 

qn = P 

which is true only when d{y) and P are relatively prime. 

So what is the probability that the y G Y produced by STEP 2.4 satisfies 
the additional condition that 

gcd(P,%)) = 1 ? 



Proposition 3. The probability that the random y produced by STEP 2.4 is 
such that d{y) and P are relatively prime is bounded below by the following 
expression 

Prob{y e Y I gcd(d(y),P) = 1} > -1 • ^ • (^1 - 1' 

where (piP) denotes Euler's totient function, i.e., (piP) is the number of 
positive integers less than P which are relatively prime to P. 



The following theorem can be found in [42, Theorem 328, Section 18.4]: 
Theorem 3. 

liminf- ^ 



N/ In In N 

where 7 denotes Euler's constant 7 = 0.57721566490153286061 ... , and 
where 6"^ = 0.5614594836 .... 



As a corollary, we have: 



Corollary 3. 

ProHy . y I gcdWrf.P) = 1} > ^ ■ ■ (1 - , 



74 SAMUEL J. LOMONACO, JR. 

where e (P) is a monotone decreasing sequence converging to zero. In terms 
of asymptotic notation, 



Proh{y G Y \ gcd{d{y),P) = 1} = n 



1 



Thus , if STEP 2. 4 is repeated O(lglgA^) times, then the probability of 
success is $7(1). 

Proof. From the above theorem, we know that 

^(^) >e---e(P) 
P/lnlnP - ^ ' ■ 

where e (P) is a monotone decreasing sequence of positive reals converging 
to zero. Thus, 

(/.(P) ^ e-T - e (P) ^ e-T - e (P) _ 6"^ - e (P) ^ 6"^ - e (P) 1 



P - InlnP - InlniV lnhi2 + InlgTV " \n2 IglgAT 

□ 



Remark 15. ^( ig ig jv ) denotes an asymptotic lower bound. Readers not 
familiar with the big-oh 0{*) and big-omega fl (*) notation should refer to 
[H, Chapter 2] or |fl|. Chapter 2]. 



Remark 16. For the curious reader, lower bounds LB{P) of e — e (P) 
for 3 < P < 841 are given in the following table: 



p 


LB{P) 


3 


0.062 


4 


0.163 


5 


0.194 


7 


0.303 


13 


0.326 


31 


0.315 


61 


0.383 


211 


0.411 


421 


0.425 


631 


0.435 


841 


0.468 



Thus, if one wants a reasonable bound on the Prob{y G Y \ gcd{d{y),P) = 1} 
before continuing with Shor's algorithm, it would pay to first use a classical 
algorithm to verify that the period P of the randomly chosen integer m is 
not too small. 
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We are now prepared to give the last step in Shor's algorithm. This step 
can be performed on a classical computer. 



Step 2.5 Compute the period P from the integer y produced by STEP 2.4. 
• Loop for each n from n = 1 Until ^„ = 0. 



Use the recurrence relations given in subsection 13.7, to com- 
pute the pn and g„ of the n-th convergent ^ of ^. 



Test to see if (jr„ = P by computing^ 



where g„ = J2i Qn,i^^ is the binary expansion of g„. 

If m''" = ImodA^, then exit with the answer P = Qn, and 

proceed to Step 3. If not, then continue the loop. 



• End of Loop 



• If you happen to reach this point, you are a very unlucky quantum 
computer scientist. You must start over by returning to STEP 
2.0. But don't give up hope! The probability that the integer y 
produced by STEP 2.4 will lead to a successful completion of Step 
2.5 is bounded below by 

4 e-T-e(P) / iV 0.232 / 1 ^ 
7r2ln2' IglgAf V ~n) ^ IglgiV V ~n) ' 

provided the period P is greater than 3. [ 7 denotes Euler's 
constant.] 



■^^The indicated algorithm for computing m'"modA'^ requires 0(lgg„) arithmetic 
operations. 
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13.10. An example of Shor's algorithm. 



Let us now show how AT = 91 (= 7 • 13) can be factored using Shor's 
algorithm. 

We choose Q = = 16384 so that <Q<2N^. 



Step 1 Choose a random positive integer m, say m = 3. Since gcd(91, 3) = 1, 
we proceed to STEP 2 to find the period of the function / given by 

/(a) = 3" mod 91 
Remark 17. Unknown to its. f has period P — 6. For. 



0123 4 567 
1 3 9 27 81 61 1 3 



Unknown period P = 6 



STEP 2.0 I InitiaHze registers 1 and 2. Thus, the state of the two registers becomes: 

l^o) = |0) |0) 



STEP 2.1 1 Apply the Q-point Fourier transform to register #1, where 

16383 



= V io''^ \x) 



0^384 



x=0 



and where a; is a primitive Q-th root of unity, e.g., lu = ei6384. Thus 
the state of the two registers becomes: 

16383 



x=0 
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STEP 2.2 I Apply the unitary transformation Uf to registers #1 and #2, where 

Uf \x) \e) = \x) I f{x) - e mod 91) . 
(Please note that Uj = I.) Thus, the state of the two registers becomes: 

IV'2) = ^ Ef=rk>|3^niod91) 

= vmi^ I 0) + I 1) |3) + I 2) |9) + I 3) |27) + I 4) |81) + | 5) |61) 
+ I 6) |1) + I 7) |3) + I 8) |9) +1 9) |27) + |10) |81) + |61) 
+ |12)|1) +|13)|3) +|14)|9) +|15)|27) + |16)|81) + |17)|61) 
+ ... 

+ 116380) |1) + 116381) |3) + | 16382) |9) + | 16383) |27) 



Remark 18. The state of the two registers is now more than a superposition 
of states. We have in the above step quantum entangled the two registers. 



STEP 2.3 I Apply the Q-point again to register #1. Thus, the state of the 
system becomes: 

= T6kSfio'ly)EiT'-^^|3^niod91) 

= lek EiT \y) IT (y)) , 

where 

16383 

|T(j/)) = '^'^^13'^ mod 91) 

x=0 
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Thus, 

|T(y))= |1) + ujy\?,)+ uj'^y\9) +u'^y\27)+ w^2'|81)+ a;5f|61) 

+ u'^y |i) + u'^y |3) + u^y |9) + u^y |27) + u^^y |8i) + u^^y |6i) 

+ u^'^y\\) + u^^y \?,) + u^'^y \9) + u^^y \27) + u^^y \%\) + u^'^y 
+ ... 

+ a;163802/ |1) + ^163812/ jg^ + ^163822/ jg^ + ^163832/ |27) 



STEP 2.4 Measure RegI. The result of our measurement just happens to turn 
out to be 

y = 13453 

Unknown to us, the probabihty of obtaining this particular y is: 

0.3189335551 x 10"^ . 

Moreover, unknown to us, we're lucky! The corresponding d is relatively 
prime to P, i.e., 

P 

d = d{y) = round{— • y) = 5 

However, we do know that the probability of d{y) being relatively prime 
to P is greater than 

0.232 1 ^ ^ 



1 - — w 8.4% (provided P > 3), 



IglgA^ V ^ 
and we also know that 

p 

is a convergent of the continued fraction expansion of 

y_ _ 13453 
Q~ 16384 

So with a reasonable amount of confidence, we proceed to Step 2.5. 



Step 2.5 Using the recurrence relations found in subsection 13.7 of this paper, 
we successively compute (beginning with n = 0) the a^'s and Qn's for 
the continued fraction expansion of 

J/ _ 13453 
^~Q~ 16384 ■ 
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For each non-trivial n in succession, we check to see if 

3*" = lmod91. 

If this is the case, then we know qn = P, and we immediately exit from 
Step 2.5 and proceed to Step 3. 

• In this example, n = and n = 1 are trivial cases. 

• For n = 2, 02 = 4 and ^2 = 5 . We test q2 by computing 

3^^ = 3^ = (3^°)' . (S^y . (S^y = 61 ^ ImodQl . 
Hence, q2 7^ P- 

• We proceed to n = 3, and compute 

03 = 1 and g3 = 6. 
We then test by computing 

3<^3 = 36 = (32°)° . (32^)V (32°)' = lmod91 . 

Hence, ga = P. Since we now know the period P, there is no need 
to continue to compute the remaining a^'s and q^s. We proceed 
immediately to Step 3. 

To satisfy the reader's curiosity we have listed in the table below all the 
values of a„, Pn, and qn for n = 0, 1, . . . ,14. But it should be mentioned 
again that we need only to compute a„ and qn for n = 0, 1, 2, 3, as indicated 
above. 



n 





1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


an 





1 


4 


1 


1 


2 


3 


1 


1 


3 


1 


1 


1 


1 


3 


Pn 





1 


4 


5 


9 


23 


78 


101 


179 


638 


817 


1455 


2272 


3727 


13453 


qn 


1 


1 


5 


6 


11 


28 


95 


123 


218 


777 


995 


1772 


2767 


4539 


16384 



Step 3. Since P = 6 is even, we proceed to Step 4. 
Since 



Step 4. 



3^/2 = 3^ = 277^ -1 mod 91, 



we goto Step 5. 
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Step 5. With the Euchdean algorithm, we compute 

gcd (3^/2 - 1, 91) = gcd (3^ - 1, 91) = gcd (26, 91) = 13 . 



We have succeeded in finding a non-trivial factor of = 91, namely 
13. We exit Shor's algorithm, and proceed to celebrate! 



14. Grover's Algorithm 



The the following description of Grover's algorithm is based on [34|, |35], 



and [49|. 



14.1. Problem definition. 

We consider the problem of searching an unstructured database of = 2" 
records for exactly one record which has been specifically marked. This can 
be rephrased in mathematical terms as an oracle problem as follows: 

Label the records of the database with the integers 

0,1,2, ... ,iV-l , 

and denote the label of the unknown marked record by xq. We are given 
an oracle which computes the n bit binary function 

/:{0,ir ^{0,1} 

defined by 

1 X = Xq 



otherwise 



We remind the readers that, as a standard oracle idealization, we have no 
access to the internal workings of the function /. It operates simply as a 
blackbox function, which we can query as many times as we like. But with 
each such a query comes an associated computational cost. 

Search Problem for an Unstructured Database. Find the record 
labeled as xq with the minimum amount of computational work, i.e., with 
the minimum number of queries of the oracle f . 

From probability theory, we know that if we examine k records, i.e., if we 
compute the oracle / for k randomly chosen records, then the probability of 
finding the record labeled as xq is k/N. Hence, on a classical computer it 
takes 0{N) = 0(2") queries to find the record labeled xq- 
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14.2. The quantum mechanical perspective. 

However, as Luv Grover so astutely observed, on a quantum computer the 
search of an unstructured database can be accomplished in 0{^/N) steps, or 
more precisely, with the application of 0{^fN\gN) sufficiently local unitary 
transformations. Although this is not exponentially faster, it is a significant 
speedup. 



Let 7^2 be a 2 dimensional Hilbert space with orthonormal basis 

{|0),|l)} ; 

and let 

{io),|i), ... ^N-l)} 

denote the induced orthonormal basis of the Hilbert space 

N-l 



n = (g)W2 . 



From the quantum mechanical perspective, the oracle function / is given 
as a blackbox unitary transformation Uf, i.e., by 

\x)(g)\y) ! — > \x) (g)\f{x)®y) 
where '©' denotes exclusive 'OR', i.e., addition modulo 2.0 



Instead of Uf, we will use the computationally equivalent unitary trans- 
formation 



= |x) 



l^o) if X = xq 
\x) otherwise 



That is computationally equivalent to Uf follows from the easily veri- 
fiable fact that 

|0)-|1)\ .,.^^^^|0)-|1) 



Uf(\x)0^-^^^={lM{\x)))^ 



V2 ' 



^Please note that Uf = {vo l) (/), as defined in sections 10.3 and 10.4 of tliis paper. 
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and also from the fact that Uf can be constructed from a controlled- J|^q^ 
and two one qubit Hadamard transforms. (For details, please refer to |51|, 



The unitary transformation I^^^'^ is actually an inversion |^] in 7i about 
the hyperplane perpendicular to |xo). This becomes evident when I^^o) is 
rewritten in the form 

^|xo> =-^-2|a;o)(xo| , 

where 'I' denotes the identity transformation. More generally, for any unit 
length ket 1-0), the unitary transformation 

I|^)=/-2|V) (VI 
is an inversion in 7i about the hyperplane orthogonal to {tp). 



14.3. Properties of the inversion I^^y 

We digress for a moment to discuss the properties of the unitary trans- 
formation . To do so, we need the following definition. 



Definition 14. Let and \x) be two kets in TC for which the bracket 
product {ip \ x) is a real number. We define 

Sc = Spanc m ,\x)) = {« m + P\x) ^ n \ a, (3 e C} 

as the sub-Hilbert space of 7i spanned by and \x)- We associate with 
the Hilbert space a real inner product space lying in defined by 

Sr = Spanu (IV) , Ix)) = {a\iP) + b\x) e H \ a,b e R} , 

where the inner product on is that induced by the bracket product on TC. 
Iflijj) o-nd Ix) o,re also linearly independent, then is a 2 dimensional real 
inner product space (i.e., the 2 dimensional Euclidean plane) lying inside of 
the complex 2 dimensional space Sq- 



Proposition 4. Let |V) and \x) be two linearly independent unit length 
kets in 7i with real bracket product; and let Sc = Spanc (| V) j Ix)) o,nd 5k = 
Span^{\%lj) ,\x))- Then 
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1) Both Sc andS^ are invariant under the transformations and 
hence /|^^ o /|^^, i.e., 



I\ip) {•Sc) = 


5c 


and 


(5r) = Sm. 




^c 


and 


I\x) (^m) = Sk 






and 





2) If L^^^\^ is the line in the plane which passes through the origin and 

which is perpendicular to\ijj), then restricted to 5k is a reflection in 
(i.e., a Mobius inversion |^] about) the line • ^ similar statement 
can be made in regard to \x)- 

3) // IV'"'") is 0' length vector in 5k perpendicular to then 

(Hence, {tI>-^ \ x) is real.) 

Finally we note that, since /|^) =1 — 2 \^) {ipl, it follows that 

Proposition 5. // {ip) is a unit length ket in 7i, and if U is a unitary 
transformation on 7i, then 



14.4. The method in Luv's "madness". 

Let H : TC — > TC be the Hadamard transform, i.e., 



where 

with respect to the basis |0), 
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We begin by using the Hadamard transform H to construct a state 
\ipo) which is an equal superposition of all the standard basis states |0), 
. . ,|A^ — 1) (including the unknown state |xo)), i.e., 

^-'■^ k=0 

Both I'i/'o) and the unknown state |xo) lie in the Euclidean plane = 
Span^ {\iPq) ,\xo)). Our strategy is to rotate within the plane Sm. the state 
Itpo) about the origin until it is as close as possible to \xq). Then a measure- 
ment with respect to the standard basis of the state resulting from rotating 
\ipo), will produce \xo) with high probability. 

To achieve this objective, we use the oracle to construct the unitary 
transformation 

which by proposition 2 above, can be reexpressed as 

Q = ~h^o)hxo) ■ 

Let |xo ) and IV'o") denote unit length vectors in 5k perpendicular to |xo) 
and |V'o)i respectively. There are two possible choices for each of |xj}) 
and l^o") respectively. To remove this minor, but nonetheless annoying, 
ambiguity, we select \xq) and IV'o") so that the orientation of the plane S-^ 
induced by the ordered spanning vectors IV'o)) is the same orientation 
as that induced by each of the ordered bases \xq), \xq) and iV'o)) jV'o")- 
(Please refer to Figure 2.) 

Remark 19. The removal of the above ambiguities is really not essential. 
However, it does simplify the exposition given below. 
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Figure 2. The hnear transformation Q\s^ is reflection in the line ^^x-'-) 
followed by reflection in the line -Z>|,/,q) which is the same as rotation by the 
angle 2/3. Thus, Ql^^ rotates \ipo) by the angle 2/3 toward l^o). 



We proceed by noting that, by the above proposition 1, the plane 5r 
lying in TC is invariant under the linear transformation Q, and that, when 
Q is restricted to the plane 5k, it can be written as the composition of two 
inversions, i.e., 

<3Um = ■ 

In particular, Q\g is the composition of two inversions in 5k, the first in 

the line Li ±\ in 5k passing through the origin having \xq) as normal, the 

no / 

second in the line i|^o) through the origin having |^o") as normal.^ 

We can now apply the following theorem from plane geometry: 

Theorem 4. // Li and L2 are lines in the Euclidean plane intersecting 
at a point O; and if (3 is the angle in the plane from Li to L2, then the 
operation of reflection in Li followed by reflection in L2 is just rotation by 
angle 2(3 about the point O. 

Let (3 denote the angle in S'k from to L\^^\^-, which by plane geometry 
is the same as the angle from I^q ) to iV'o); which in turn is the same as the 
angle from \xq) to |V'o")- Then by the above theorem Q\s^ = I]^^i_\^I\xQ) is 
a rotation about the origin by the angle 2/3. 

The key idea in Grover's algorithm is to move \iPq) toward the unknown 
state |xo) by successively applying the rotation Q to iV^o) to rotate it around 
to |xo). This process is called amplitude amplification. Once this 
process is completed, the measurement of the resulting state (with respect 
to the standard basis) will, with high probability, yield the unknown state 
|xo). This is the essence of Grover's algorithm. 



The line intersection of the plane >Sm with the hyperplane in TL orthogonal 

to |xo). A similar statement can be made in regard to -£/|^o>- 
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But how many times K should we apply the rotation Q to iV'o)'? If we 
applied Q too many or too few times, we would over- or undershoot our 
target state |xo). 



We determine the integer K as follows: 
Since 

IV'o) = sin (3 \ xq) + cos (3 Xq 
the state resulting after k applications of Q is 

iV'fc) = IV'o) = sin [(2A; + 1) (3] \x^) + cos [(2A: + 1) (3] 
Thus, we seek to find the smallest positive integer K = k such that 

sin [{2k + 1) /3] 

is as close as possible to 1. In other words, we seek to find the smallest 
positive integer K = k such that 

{2k + l)p 

is as close as possible to 7r/2. It follows that^ 

. vr 1 
K = k = round — — 



.4/3 2, 

where ^^round" is the function that rounds to the nearest integer. 



We can determine the angle f3 by noting that the angle a from l-i/^o) and 
|xo) is complementary to /3, i.e., 

a + P = tt/2 , 

and hence, 

1 vr 

{xq I -00) = cos a = cos( /3) = sin P . 



Thus, the angle f3 is given by 



/3 = sin ^ f I — ^ (for larg- 



:e N) 



and hence, 

K = k = round 



IT 



— ^ ~ round ^^"^^^ ~ 2^ large A^). 



^^The reader may prefer to use the floor function instead of the round function. 
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14.5. Summary of Grover's algorithm. 

In summary, we provide the following outline of Grover's algorithm: 
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Grover's Algorithm 



STEP I (Initialization) 

' ^ N-l 

j=0 

k < — 



STEP 1. Loop until k = round ^ 



4sm-'^(l/VN 



k 



-k + l 



round {^\^/N -\ 



STEP 2. 



Measure with respect to the standard basis 

|0) , 1 1) , ... , I — 1) to obtain the marked unknown 

state |xo) with probability > 1 — 



We complete our summary with the following theorem: 

Theorem 5. With a probability of erroif^ 

ProbE < ^, 

Grover's algorithm finds the unknown state \xo) at a computational cost of 

O (^\^lgN^ 
Proof. 

Part 1. The probability of error ProbE of finding the hidden state |xo) is given 
by 

ProbE = cos"^ [{2K + 1) p] , 

where 

K = round I — ^ 



If the reader prefers to use the floor function rather than the round function, then 

J_ _ 4 
N N^- 



probabihty of error becomes Probs < * * 
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where "round" is the function that rounds to the nearest integer. 
Hence, 

^-1<K<^ =^ ^-/3<{2K+l)(3<^+/3 

=^ sin/? = cos (f - /3) > cos [i2K + !)/?]> cos (f + /3) = - sin/3 

Thus, 

ProbE = cos^ [{2K + !)/?]< sin^ p = sin^ ^sin"^ 

Part 2. The computational cost of the Hadamard transform H = (^q^^ H^'^'^ 
is 0(n) = O(lgiV) single qubit operations. The transformations — /|o) 
and each carry a computational cost of 0(1). 

STEP 1 is the computationally dominant step. In STEP 1 there are 
O (^VN^ iterations. In each iteration, the Hadamard transform is ap- 
plied twice. The transformations and are each applied once. 
Hence, each iteration comes with a computational cost of O (Ig N) , and 
so the total cost of STEP 1 is 0{VNlgN). 

□ 




14.6. An example of Grover's algorithm. 



As an example, we search a database consisting of A'' = 2" = 8 records for 
an unknown record with the unknown label xq = 5. The calculations for this 
example were made with OpenQuacks , which is an open source quantum 
simulator Maple package developed at UMBC and publically available. 



We are given a blackbox computing device 



In 



Out 



that implements as an oracle the unknown unitary transformation 
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We cannot open up the blackbox 



to see what is inside. 



So we do not know what I^^.^-^ and xq are. The only way that we can glean 
some information about xq is to apply some chosen state as input, and 
then make use of the resulting output. 



Using of the blackbox 



'|?> 



a computing device 
operator 



as a component device, we construct 
which implements the unitary 
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We do not know what unitary transformation Q is implemented by the 
device - 



-HI^HIyi^ 



of its essential components. 



because the blackbox 



'I?) 



is one 



STEP 0. We begin by preparing the known state 



iV^o) = H 10) = (1. 1. 1. 1. 1. 1. 1. 



STEP 1. 1 We proceed to loop 

K = round 



TT 



4sin-i(l/V8) 2 



= 2 



times in STEP 1. 
Iteration 1. On the first iteration, we obtain the unknown state 



|V'i) = Q|V'o) = ^(l,l,l,l,5,l,l,l 



transpose 
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Iteration 2. On the second iteration, we obtain the unknown state 



1^2) = Q IV'i) = ^ (-1, -1, -1, -1, 11, -1, -1, -1)*™-^'°- 



and branch to STEP 2. 



STEP 2. We measure the unknown state 1-02) to obtain either 

|5) 

with probabihty 

121 

Probsuccess = sin^ {{2K + 1) p) = — = 0.9453 
or some other state with probabihty 

ProbFailure = cos^ {{^K + 1) /?) = -I^ = 0.0547 
and then exit. 



15. There is much more to quantum computation 



Needles to say, there is much more to quantum computation. I hope that 
you found this introductory paper useful. 
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